CVE-2021-21003

Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products

Published Jun 25, 2021 CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected.

Remediation

Vendor Workaround

Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note: Measures to protect network-capable devices with Ethernet connection https://dam-mdc.phoenixcontact.com/asset/156443151564/0a870ae433c19148b80bd760f3a1c1f2/107913_en_03.pdf

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-8412 In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
CERTVDE
Published
Updated
Sep 17, 2024, 1:31 AM
Reserved
Dec 17, 2020, 12:00 AM
Status
Modified
Published
Jun 25, 2021, 7:15 PM
Modified
Jun 17, 2026, 3:34 AM