CVE-2021-21003

CWE-4043 documents3 sources
Severity
5.3MEDIUM
EPSS
0.3%
top 46.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
17
Phoenix Contact FL NATPhoenix Contact FL SwitchPhoenixcontact FL NAT SMN 8tx-m Firmware+14 more
Timeline
PublishedJun 25
Latest updateMay 24

Description

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages17 packages

🔴Vulnerability Details

2
GHSA
GHSA-4567-7fw8-972r: In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Ec↗2022-05-24
▶
CVEList
Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products↗2021-06-25
▶
CVE-2021-21003 (MEDIUM CVSS 5.3) | In Phoenix Contact FL SWITCH SMCS s | cvebase.io