high7.4
CVE-2021-21004
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management whic…
Impact
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Fl Switch Smcs 16tx Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 14tx\/2fx Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 14tx\/2fx-Sm Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 8gt Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 6gt\/2sfp Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 8tx-Pn Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 4tx-Pn Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 8tx Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 6tx\/2sfp Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smn 6tx\/2pof-Pn Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smn 8tx-Pn Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smn 6tx\/2fx Firmware | through 4.70 |