CVEvulnerability
CVE-2021-21003
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-06-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-404
Description
In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected.
Affected configurations
• phoenixcontact fl switch smcs 16tx firmware (<= 4.70)
• phoenixcontact fl switch smcs 14tx\/2fx firmware (<= 4.70)
• phoenixcontact fl switch smcs 14tx\/2fx-sm firmware (<= 4.70)
• phoenixcontact fl switch smcs 8gt firmware (<= 4.70)
• phoenixcontact fl switch smcs 6gt\/2sfp firmware (<= 4.70)
• phoenixcontact fl switch smcs 8tx-pn firmware (<= 4.70)
• phoenixcontact fl switch smcs 4tx-pn firmware (<= 4.70)
• phoenixcontact fl switch smcs 8tx firmware (<= 4.70)
• phoenixcontact fl switch smcs 6tx\/2sfp firmware (<= 4.70)
• phoenixcontact fl switch smn 6tx\/2pof-pn firmware (<= 4.70)
• phoenixcontact fl switch smn 8tx-pn firmware (<= 4.70)
• phoenixcontact fl switch smn 6tx\/2fx firmware (<= 4.70)
• phoenixcontact fl switch smn 6tx\/2fx sm firmware (<= 4.70)
• phoenixcontact fl nat smn 8tx firmware (<= 4.63)
• phoenixcontact fl nat smn 8tx-m firmware (<= 4.63)
Related
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- https://cert.vde.com/en-us/advisories/vde-2021-023 Third Party Advisory
- https://cert.vde.com/en-us/advisories/vde-2021-023 Third Party Advisory