high7.3
CVE-2021-33540
In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.
Impact
In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Axl F Bk Pn Tps Xc Firmware | before 1.30 |
| Phoenixcontact | Axl F Bk Pn Tps Firmware | before 1.30 |
| Phoenixcontact | Axl F Bk Eip Firmware | before 1.30 |
| Phoenixcontact | Axl F Bk Eip Ef Firmware | before 1.30 |
| Phoenixcontact | Axl F Bk Eth Firmware | before 1.30 |
| Phoenixcontact | Axl F Bk Eth Xc Firmware | before 1.30 |
| Phoenixcontact | Axl F Bk S35 Firmware | before 1.40 |
| Phoenixcontact | Axl F Bk Pn Firmware | All versions |
| Phoenixcontact | Axl F Bk Pn Xc Firmware | All versions |
| Phoenixcontact | Axl F Bk Eth Net2 Firmware | All versions |
| Phoenixcontact | Axl F Bk Sas Firmware | All versions |
| Phoenixcontact | Il Pn Bk-Pac Firmware | All versions |