First published: Fri Jun 25 2021(Updated: )
In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected.
Credit: info@cert.vde.com
Affected Software | Affected Version | How to fix |
---|---|---|
Phoenixcontact FL Switch SMCS 16TX Firmware | <=4.70 | |
Phoenix Contact FL Switch SMCS 16TX | ||
Phoenixcontact Fl Switch Smcs 14tx/2fx Firmware | <=4.70 | |
Phoenixcontact Fl Switch Smcs 14tx/2fx | ||
Phoenixcontact Fl Switch Smcs 14tx/2fx-sm Firmware | <=4.70 | |
Phoenix Contact FL Switch SMCS 14TX/2FX-SM | ||
Phoenixcontact Fl Switch Smcs 8gt Firmware | <=4.70 | |
Phoenixcontact Fl Switch Smcs 8gt Firmware | ||
Phoenixcontact Fl Switch Smcs 6gt/2sfp Firmware | <=4.70 | |
Phoenixcontact Fl Switch Smcs 6gt/2sfp | ||
Phoenixcontact Fl Switch Smn 8tx-pn Firmware | <=4.70 | |
Phoenixcontact Fl Switch Smcs 8tx-pn Firmware | ||
Phoenix Contact FL Switch SMCS 4TX-PN Firmware | <=4.70 | |
Phoenix Contact FL Switch SMCS 4TX-PN Firmware | ||
Phoenixcontact Fl Switch Smcs 8tx Firmware | <=4.70 | |
Phoenix Contact FL Switch SMCS 8TX | ||
Phoenixcontact Fl Switch Smcs 6tx/2sfp Firmware | <=4.70 | |
Phoenixcontact Fl Switch Smcs 6tx/2sfp | ||
Phoenix Contact FL Switch SMN 6TX/2POF-PN Firmware | <=4.70 | |
Phoenix Contact FL Switch SMN 6TX/2POF-PN | ||
Phoenixcontact Fl Switch Smn 8tx-pn Firmware | <=4.70 | |
Phoenixcontact Fl Switch Smn 8tx-pn Firmware | ||
Phoenixcontact Fl Switch Smn 6tx/2fx Firmware | <=4.70 | |
Phoenixcontact Fl Switch Smn 6tx/2fx | ||
Phoenixcontact Fl Switch Smn 6tx/2fx Sm Firmware | <=4.70 | |
Phoenix Contact FL Switch SMN 6TX/2FX SM | ||
Phoenix Contact FL NAT SMN 8TX Firmware | <=4.63 | |
Phoenix Contact FL NAT SMN 8TX-M | ||
Phoenix Contact FL NAT SMN 8TX-M Firmware | <=4.63 | |
Phoenix Contact FL NAT SMN 8TX-M Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Phoenix Contact FL SWITCH SMCS series products vulnerability is CVE-2021-21003.
The severity of CVE-2021-21003 is medium with a severity value of 5.3.
CVE-2021-21003 can cause a Denial of Service of Web-, SNMP- and ICMP-Echo services on Phoenix Contact FL SWITCH SMCS series products.
To fix CVE-2021-21003, it is recommended to update the firmware of Phoenix Contact FL SWITCH SMCS series products to version 4.70 or later.
More information about CVE-2021-21003 can be found at the following reference: [link](https://cert.vde.com/en-us/advisories/vde-2021-023).