CVE-2021-21004
Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products
Severity Score
6.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.
En los productos de la serie Phoenix Contact FL SWITCH SMCS en múltiples versiones, un atacante puede insertar código malicioso por medio de tramas LLDP en la administración basada en la web, que luego podría ser ejecutado por el cliente
*Credits:
This vulnerability has been discovered and reported by Anne Borcherding, Fraunhofer- Institut für Optronik, Systemtechnik und Bildauswertung IOSB. PHOENIX CONTACT thanks CERT@VDE for the coordination and support with this publication.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-12-17 CVE Reserved
- 2021-06-25 CVE Published
- 2024-03-08 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://cert.vde.com/en-us/advisories/vde-2021-023 | Not Applicable |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 16tx Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 16tx Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 16tx Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 16tx Search vendor "Phoenixcontact" for product "Fl Switch Smcs 16tx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 14tx\/2fx Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 14tx\/2fx Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 14tx\/2fx-sm Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx-sm Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx-sm Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 14tx\/2fx-sm Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx-sm" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8gt Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8gt Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8gt Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8gt Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8gt" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 6gt\/2sfp Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6gt\/2sfp Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6gt\/2sfp Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 6gt\/2sfp Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6gt\/2sfp" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8tx-pn Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx-pn Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx-pn Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8tx-pn Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx-pn" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 4tx-pn Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 4tx-pn Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 4tx-pn Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 4tx-pn Search vendor "Phoenixcontact" for product "Fl Switch Smcs 4tx-pn" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8tx Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8tx Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 6tx\/2sfp Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6tx\/2sfp Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6tx\/2sfp Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 6tx\/2sfp Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6tx\/2sfp" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2pof-pn Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2pof-pn Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2pof-pn Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2pof-pn Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2pof-pn" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 8tx-pn Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smn 8tx-pn Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smn 8tx-pn Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 8tx-pn Search vendor "Phoenixcontact" for product "Fl Switch Smn 8tx-pn" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2fx Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2fx Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2fx Sm Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx Sm Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx Sm Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2fx Sm Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx Sm" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Nat Smn 8tx Firmware Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx Firmware" | <= 4.63 Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx Firmware" and version " <= 4.63" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Nat Smn 8tx Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Nat Smn 8tx-m Firmware Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx-m Firmware" | <= 4.63 Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx-m Firmware" and version " <= 4.63" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Nat Smn 8tx-m Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx-m" | - | - |
Safe
|