← CVE Intelligence

CVE-2021-21005

Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products PUBLISHED

Description (CNA)

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards.

Affected (CNA)

Vendor / productVersions
Phoenix Contact / FL SWITCHaffected SMCS 16TX (2700996) through 4.70; affected SMCS 14TX/2FX (2700997) through 4.70; affected SMCS 14TX/2FX-SM (2701466) through 4.70; affected SMCS 8GT (2891123) through 4.70; affected SMCS 6GT/2SFP (2891479) through 4.70; affected SMCS 8TX-PN (2989103) through 4.70; affected SMCS 4TX-PN (2989093) through 4.70; affected SMCS 8TX (2989226) through 4.70; affected SMCS 6TX/2SFP (2989323) through 4.70; affected SMN 6TX/2POF-PN (2700290) through 4.70; affected SMN 8TX-PN (2989501) through 4.70; affected SMN 6TX/2FX (2989543) through 4.70; affected SMN 6TX/2FX SM (2989556) through 4.70
Phoenix Contact / FL NATaffected SMN 8TX (2989365) through 4.63; affected SMN 8TX-M (2702443) through 4.63

CWE

CWE-362

References

ADP enrichment

CVE

No English description supplied.