high7.5
CVE-2021-21005
In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-P…
Impact
In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Fl Switch Smcs 16tx Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 14tx\/2fx Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 14tx\/2fx-Sm Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 8gt Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 6gt\/2sfp Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 8tx-Pn Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 4tx-Pn Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 8tx Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smcs 6tx\/2sfp Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smn 6tx\/2pof-Pn Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smn 8tx-Pn Firmware | through 4.70 |
| Phoenixcontact | Fl Switch Smn 6tx\/2fx Firmware | through 4.70 |