7.5

CVE-2021-33540: phoenix contact axl f bk Use of Hard-coded Credentials

CVSS: 7.5v2.0HighModified
Published 25-06-2021Last modified 17-09-2024
Open JSON

Vulnerability summary

CVE-2021-33540 is a high (CVSS 7.5) Use of Hard-coded Credentials vulnerability in phoenix contact axl f bk. EPSS estimates a 0.72% chance of exploitation in the next 30 days, higher than 53.1% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v2.0 (NVD)
EPSS score
0.72%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 25-06-2021
    PublishedVulnerability first disclosed.
  2. 17-09-2024
    Last modifiedVulnerability information updated.

Description

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

0.72%

Chance of exploitation in the next 30 days

Percentile

53%

Versus all other CVEs

30-day change

0.00 pp

From 0.72% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.72%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Phoenixcontact7 products
Phoenix contact2 products
  • axl f bk≥ AXL F PN TPS XC (1068857), < 1.30 | ≥ AXL F EIP EF (2702782), < 1.30 | ≥ AXL F PN TPS (2403869), < 1.30 | ≥ AXL F EIP (2688394), < 1.30 | ≥ AXL F ETH (2688459), < 1.30 | ≥ AXL F ETH XC (2701949), < 1.30 | ≥ AXL F S3 (2701686), < 1.40 | AXL F PN (2701815) all revisions | AXL F PN XC (2701222) all revisions | AXL F ETH NET2 (2702177) all revisions | AXL F SAS (2701457) all revisions
  • ilIL PN BK-PAC (2403696) all revisions | IL PN BK DI8 DO4 2TX-PAC (2703994) all revisions | IL PN BK DI8 DO4 2SCRJ-PAC (2878379) all revisions | IL ETH BK DI8 DO4 2TX-XC-PAC (2701388) all revisions | IL ETH BK DI8 DO4 2TX-PAC (2703981) all revisions | IL EIP BK DI8 DO4 2TX-PAC (2897758) all revisions | IL S3 BK DI8 DO4 2TX-PAC (2692380) all revisions

2 vendors · 9 products

References

1 links