CVE-2021-34570

🗓️ 27 Sep 2021 08:25:09Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 52 Views

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2021-34570	3 Aug 202122:00	–	attackerkb
Circl	CVE-2021-34570	27 Sep 202112:34	–	circl
CNNVD	Phoenix Contact PLCnext Control Devices 输入验证错误漏洞	27 Sep 202100:00	–	cnnvd
Cvelist	CVE-2021-34570 Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS	27 Sep 202108:25	–	cvelist
EUVD	EUVD-2021-21220	7 Oct 202500:30	–	euvd
NVD	CVE-2021-34570	27 Sep 202109:15	–	nvd
OSV	CVE-2021-34570	27 Sep 202109:15	–	osv
Prion	Code injection	27 Sep 202109:15	–	prion
Tenable Nessus	Phoenix Contact PLCnext Improper Input Validation (CVE-2021-34570)	4 Dec 202400:00	–	nessus
Tenable Nessus	Phoenix Contact PLCnext Improper Input Validation (CVE-2021-34570)	25 Jan 202300:00	–	nessus

NVD

Vulners

Node

AND

phoenixcontact plcnext_technology_starterkit_firmwareRange<2021.0.5lts

phoenixcontact plcnext_technology_starterkitMatch-

Node

AND

phoenixcontact axc_f_2152_starterkit_firmwareRange<2021.0.5lts

phoenixcontact axc_f_2152_starterkitMatch-

Node

AND

phoenixcontact rfc_4072s_firmwareRange<2021.0.5lts

phoenixcontact rfc_4072sMatch-

Node

AND

phoenixcontact axc_f_3152_firmwareRange<2021.0.5lts

phoenixcontact axc_f_3152Match-

Node

AND

phoenixcontact axc_f_1152_firmwareRange<2021.0.5lts

phoenixcontact axc_f_1152Match-

Node

AND

phoenixcontact axc_f_2152_firmwareRange<2021.0.5lts

phoenixcontact axc_f_2152Match-

[
  {
    "product": "AXC F",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2021.0.5 LTS",
        "status": "affected",
        "version": "AXC F 1152 (1151412)",
        "versionType": "custom"
      },
      {
        "lessThan": "2021.0.5 LTS",
        "status": "affected",
        "version": "AXC F 2152 (2404267)",
        "versionType": "custom"
      },
      {
        "lessThan": "2021.0.5 LTS",
        "status": "affected",
        "version": "AXC F 3152 (1069208)",
        "versionType": "custom"
      },
      {
        "lessThan": "2021.0.5 LTS",
        "status": "affected",
        "version": "AXC F 2152 Starterkit (1046568)",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "RFC",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2021.0.5 LTS",
        "status": "affected",
        "version": "RFC 4072S (1051328)",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PLCnext",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2021.0.5 LTS",
        "status": "affected",
        "version": "PLCnext Technology Starterkit (1188165)",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2021-029/

17 Jun 2026 03:56Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 27.8

EPSS0.00978

CWE-20