CVE-2021-33540

Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices

Published Jun 25, 2021 CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Description
In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.

Remediation

Vendor Solution

Please refer to the advisory (https://cert.vde.com/en-us/advisories/vde-2021-021) for a list of updated firmware versions for remediation.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-20232 In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
CERTVDE
Published
Updated
Sep 17, 2024, 3:18 AM
Reserved
May 24, 2021, 12:00 AM
Status
Modified
Published
Jun 25, 2021, 7:15 PM
Modified
Jun 17, 2026, 3:54 AM