CVE-2021-21005
Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards.
En los productos de la serie Phoenix Contact FL SWITCH SMCS en múltiples versiones, si un atacante envía un paquete TCP diseñado a mano con el Urgent-Flag ajustado y el Urgent-Pointer ajustado en 0, la pila de red se bloqueará. El dispositivo debe ser reiniciado después
*Credits:
This vulnerability has been discovered and reported by Anne Borcherding, Fraunhofer- Institut für Optronik, Systemtechnik und Bildauswertung IOSB. PHOENIX CONTACT thanks CERT@VDE for the coordination and support with this publication.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-12-17 CVE Reserved
- 2021-06-25 CVE Published
- 2024-03-08 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://cert.vde.com/en-us/advisories/vde-2021-023 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 16tx Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 16tx Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 16tx Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 16tx Search vendor "Phoenixcontact" for product "Fl Switch Smcs 16tx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 14tx\/2fx Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 14tx\/2fx Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 14tx\/2fx-sm Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx-sm Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx-sm Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 14tx\/2fx-sm Search vendor "Phoenixcontact" for product "Fl Switch Smcs 14tx\/2fx-sm" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8gt Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8gt Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8gt Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8gt Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8gt" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 6gt\/2sfp Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6gt\/2sfp Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6gt\/2sfp Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 6gt\/2sfp Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6gt\/2sfp" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8tx-pn Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx-pn Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx-pn Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8tx-pn Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx-pn" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 4tx-pn Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 4tx-pn Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 4tx-pn Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 4tx-pn Search vendor "Phoenixcontact" for product "Fl Switch Smcs 4tx-pn" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8tx Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 8tx Search vendor "Phoenixcontact" for product "Fl Switch Smcs 8tx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 6tx\/2sfp Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6tx\/2sfp Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6tx\/2sfp Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smcs 6tx\/2sfp Search vendor "Phoenixcontact" for product "Fl Switch Smcs 6tx\/2sfp" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2pof-pn Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2pof-pn Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2pof-pn Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2pof-pn Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2pof-pn" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 8tx-pn Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smn 8tx-pn Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smn 8tx-pn Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 8tx-pn Search vendor "Phoenixcontact" for product "Fl Switch Smn 8tx-pn" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2fx Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2fx Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2fx Sm Firmware Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx Sm Firmware" | <= 4.70 Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx Sm Firmware" and version " <= 4.70" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Switch Smn 6tx\/2fx Sm Search vendor "Phoenixcontact" for product "Fl Switch Smn 6tx\/2fx Sm" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Nat Smn 8tx Firmware Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx Firmware" | <= 4.63 Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx Firmware" and version " <= 4.63" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Nat Smn 8tx Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx" | - | - |
Safe
|
| Phoenixcontact Search vendor "Phoenixcontact" | Fl Nat Smn 8tx-m Firmware Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx-m Firmware" | <= 4.63 Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx-m Firmware" and version " <= 4.63" | - |
Affected
| in | Phoenixcontact Search vendor "Phoenixcontact" | Fl Nat Smn 8tx-m Search vendor "Phoenixcontact" for product "Fl Nat Smn 8tx-m" | - | - |
Safe
|