← Back

CVE-2020-12521

nvd nist
Published: Dec 17, 2020Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.

Affected (1)

Phoenixcontact
1 product
Plcnext Firmware
Configuration A
1 platform
Running on/withPlatform Versions
Phoenixcontact
Axc F 1152
All versions
Configuration B
1 platform
Running on/withPlatform Versions
Phoenixcontact
Axc F 2152
All versions
Configuration C
1 platform
Running on/withPlatform Versions
Phoenixcontact
Axc F 3152
All versions
Configuration D
1 platform
Running on/withPlatform Versions
Phoenixcontact
Rfc 4072s
All versions
Configuration E
1 platform
Running on/withPlatform Versions
Phoenixcontact
Axc F 2152 Starterkit
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Plcnext Firmware
Before 2021.0
Running on/withPlatform Versions
Phoenixcontact
Plcnext Technology Starterkit
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: info@cert.vde.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.