CVE-2018-25112 — PHOENIX CONTACT: ILC 1x1 ETH Denial of Service

CVE-2018-25112

PHOENIX CONTACT: ILC 1x1 ETH Denial of Service PUBLISHED

Description (CNA)

An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the device.

Affected (CNA)

Vendor / product	Versions
PHOENIX CONTACT / ILC 131	affected vers:all/*
PHOENIX CONTACT / ILC 151	affected vers:all/*
PHOENIX CONTACT / ILC 171	affected vers:all/*
PHOENIX CONTACT / ILC 191 ETH	affected vers:all/*

CWE

CWE-770

References

https://certvde.com/en/advisories/VDE-2018-012/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.