Lucene search

K
cvelistCERTVDECVELIST:CVE-2020-12521
HistoryDec 17, 2020 - 12:00 a.m.

CVE-2020-12521 Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.

2020-12-1700:00:00
CWE-20
CERTVDE
www.cve.org

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

25.2%

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.

CNA Affected

[
  {
    "product": "AXC F 1152 (1151412)",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2021.0 LTS",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "AXC F 2152 (2404267)",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2021.0 LTS",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "AXC F 3152 (1069208)",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2021.0 LTS",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "RFC 4072S (1051328",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2021.0 LTS",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "AXC F 2152 Starterkit (1046568)",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2021.0 LTS",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PLCnext Technology Starterkit (1188165)",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "2021.0 LTS",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

25.2%

Related for CVELIST:CVE-2020-12521