Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Phoenix Contact AXC F 1152 (1151412), AXC F 2152 (2404267) and 4 more products 2021.0 LTS Clear all filters
TI-2020-10014 CVE-2020-12521 · GHSA-vp46-jgwp-q8w3

Improper input validation in Phoenix Contact AXC F 1152

Priority LOW 29

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00459 Published 2020-12-17 Fixed in 2021.0 LTS CWE-20
TI-2020-10013 CVE-2020-12519 · GHSA-26hg-qjgg-2868

Improper privilege management in Phoenix Contact AXC F 1152

Priority MEDIUM 44

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00861 Published 2020-12-17 Fixed in 2021.0 LTS CWE-269
TI-2020-10012 CVE-2020-12518 · GHSA-2g4f-r7cc-55q9

Information disclosure in Phoenix Contact AXC F 1152

Priority LOW 26

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00747 Published 2020-12-17 Fixed in 2021.0 LTS CWE-200
TI-2020-10011 CVE-2020-12517 · GHSA-hwm9-775j-vf84

Cross-site scripting in Phoenix Contact AXC F 1152

Priority MEDIUM 41

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (loc…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01124 Published 2020-12-17 Fixed in 2021.0 LTS CWE-79