CVE-2021-34570

Published: Sep 27, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.

Affected (6)

Products: Phoenixcontact: Plcnext Technology Starterkit Firmware, Axc F 2152 Starterkit Firmware, Rfc 4072s Firmware, Axc F 3152 Firmware, Axc F 1152 Firmware, Axc F 2152 Firmware

Phoenixcontact

6 products

Plcnext Technology Starterkit Firmware

Axc F 2152 Starterkit Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Plcnext Technology Starterkit Firmware	Before 2021.0.5

Running on/with	Platform Versions
Phoenixcontact Plcnext Technology Starterkit	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Axc F 2152 Starterkit Firmware	Before 2021.0.5

Running on/with	Platform Versions
Phoenixcontact Axc F 2152 Starterkit	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Rfc 4072s Firmware	Before 2021.0.5

Running on/with	Platform Versions
Phoenixcontact Rfc 4072s	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Axc F 3152 Firmware	Before 2021.0.5

Running on/with	Platform Versions
Phoenixcontact Axc F 3152	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Axc F 1152 Firmware	Before 2021.0.5

Running on/with	Platform Versions
Phoenixcontact Axc F 1152	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phoenixcontact Axc F 2152 Firmware	Before 2021.0.5

Running on/with	Platform Versions
Phoenixcontact Axc F 2152	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://cert.vde.com/en/advisories/VDE-2021-029/

Source: info@cert.vde.com

PatchThird Party Advisory

https://cert.vde.com/en/advisories/VDE-2021-029/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.