Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-21005

Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Fl Nat Smn 8tx Fl Nat Smn 8tx-m Fl Nat Smn 8tx-m Firmware and 27 more
CVE-2021-21004

Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Fl Nat Smn 8tx Fl Nat Smn 8tx-m Fl Nat Smn 8tx-m Firmware and 27 more
CVE-2021-21003

Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Fl Nat Smn 8tx Fl Nat Smn 8tx-m Fl Nat Smn 8tx-m Firmware and 27 more