Phoenix Contact vulnerabilities

190 vulnerabilities

Known vulnerabilities in Phoenix Contact products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 249 products.

Products

50 of 249
7.5CVE-2018-25112phoenix contactilc 131+3
EPSS score
0.46%
An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the device.7.8CVE-2021-21005phoenix contactfl nat+16
EPSS score
0.68%
In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards.5.3CVE-2021-21003phoenix contactfl nat+16
EPSS score
0.95%
In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected.7.5CVE-2021-21002phoenix contactfl comserver+2
EPSS score
0.96%
In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a invalid Modbus exception response can lead to a temporary denial of service.7.4CVE-2021-21004phoenix contactfl nat+16
EPSS score
0.58%
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.7.8CVE-2021-34570phoenix contactaxc f+8
EPSS score
0.98%
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.4.8CVE-2021-34582phoenix contactfl mguard+2
EPSS score
0.29%
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.3.3CVE-2021-34563pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3
EPSS score
0.24%
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.7.5CVE-2021-34579phoenix contactfl mguard dm (2981974)+1
EPSS score
0.64%
In Phoenix Contact: FL MGUARD DM version 1.12.0 and 1.13.0 access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.Attackers with network access to the Apache web server can download and therefore read mGuard configuration profiles (“ATV profiles”). Such configuration profiles may contain sensitive information, e.g. private keys associated with IPsec VPN connections.8.8CVE-2021-34561pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3
EPSS score
0.87%
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.7.8CVE-2021-34597phoenix contactpc worx+2
EPSS score
0.65%
Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.6.1CVE-2021-34562pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3
EPSS score
0.58%
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.9.8CVE-2021-34565pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3
EPSS score
1.03%
In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.7.5CVE-2021-34598phoenix contactfl mguard+2
EPSS score
0.93%
In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active5.4CVE-2021-34559pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3
EPSS score
0.77%
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 a vulnerability may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings.5.5CVE-2021-34564pepperl-fuchswha-gw-f2d2-0-as-_z2-eth.eip_firmware+3
EPSS score
0.15%
Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.5.5CVE-2021-34560pepperl-fuchswha-gw-f2d2-0-as-z2-eth_firmware+3
EPSS score
0.21%
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.7.5CVE-2021-33540phoenix contactaxl f bk+8
EPSS score
0.72%
In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.7.8CVE-2021-33542phoenix contactautomation worx software suite+3
EPSS score
1.76%
Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of incompletely initialized data. The attacker needs to get access to an original bus configuration file (*.bcp) to be able to manipulate data inside. After manipulation the attacker needs to exchange the original file by the manipulated one on the application programming workstation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities. Automated systems in operation which were programmed with one of the above-mentioned products are not affected.7.8CVE-2021-33541phoenix contactilc1x
EPSS score
1.49%
Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of service on the PLC's network communication module. A successful attack stops all network communication. To restore the network connectivity the device needs to be restarted. The automation task is not affected.