CVE-2021-21004

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

CVE-2021-21004

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

CVE-2021-21005

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards...

CVE-2021-21003

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected...

Code injection

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected...

Code injection

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

Design/Logic Flaw

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards...

CVE-2021-21005

CVE-2021-21005 affects Phoenix Contact FL SWITCH SMCS series. A crafted TCP packet with the Urgent-Flag set and Urgent-Pointer at 0 can crash the device’s network stack, requiring a reboot. The provided sources confirm affected product family and the exact trigger, with CVSS indicating HIGH impac...

CVE-2021-21005 Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards...

CVE-2021-21004 Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

CVE-2021-21004

CVE-2021-21004 affects Phoenix Contact FL SWITCH SMCS series. An attacker can inject malicious code via LLDP frames into the device’s web-based management, which could be executed by the client. Documented impact includes potential modification or execution of code on the client side, with CVSS d...

CVE-2021-21003 Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected...

CVE-2021-21003

Phoenix Contact FL SWITCH SMCS series devices are affected by CVE-2021-21003 due to fragmentation of TCP packets. In multiple versions, fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP-, and ICMP-Echo services; switching functionality remains unaffected. The CVE description conf...

Phoenix Contact FL SWITCH竞争条件问题漏洞

The Phoenix Contact FL SWITCH is an industrial grade Ethernet switch from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact FL SWITCH SMCS, which can be exploited by an attacker to send a manual tcp packet with the emergency flag set and the emergency pointer set to...

Phoenix Contact FL SWITCH 安全漏洞

Phoenix Contact FL SWITCH is an industrial Ethernet switch from Phoenix Contact, Germany.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream-based transport layer communication protocol defined by the IETF RFC 793. TCP Transmission Control Protocol is a...

ArubaOS-Switch Multiple Vulnerabilities (ARUBA-PSA-2020-007)

The version of ArubaOS-Switch installed on the remote host is 16.08. prior to version 16.08.0009, 16.09. prior to 16.09.0007 or 16.10. prior to 16.10.0003. It is, therefore, affected by multiple vulnerabilities, as follows: - A vulnerability in the Web Management Interface allows an attacker to...

Multiple Huawei products command injection vulnerabilities

Huawei S12700 and others are an enterprise-class switch product from Huawei China. A number of Huawei products command injection vulnerability, attackers can use the vulnerability to send malicious parameters can be injected into the command line, affecting normal functionality...

CVE-2021-0553

In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android...

CVE-2021-0553

In onBindViewHolder of AppSwitchPreference.java, there is a possible bypass of device admin setttings due to unclear UI. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android...

openvswitch: use-after-free in decode_NXAST_RAW_ENCAP during the decoding of a RAW_ENCAP action

Open vSwitch aka openvswitch has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...