CVE-2021-21005

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards.
References
Link Resource
https://cert.vde.com/en-us/advisories/vde-2021-023 Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smcs_16tx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smcs_16tx:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smcs_14tx\/2fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smcs_14tx\/2fx:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smcs_14tx\/2fx-sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smcs_14tx\/2fx-sm:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smcs_8gt_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smcs_8gt:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smcs_6gt\/2sfp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smcs_6gt\/2sfp:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smcs_8tx-pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smcs_8tx-pn:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smcs_4tx-pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smcs_4tx-pn:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smcs_8tx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smcs_8tx:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smcs_6tx\/2sfp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smcs_6tx\/2sfp:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smn_6tx\/2pof-pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smn_6tx\/2pof-pn:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smn_8tx-pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smn_8tx-pn:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smn_6tx\/2fx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smn_6tx\/2fx:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_switch_smn_6tx\/2fx_sm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_switch_smn_6tx\/2fx_sm:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_nat_smn_8tx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_nat_smn_8tx:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:phoenixcontact:fl_nat_smn_8tx-m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:fl_nat_smn_8tx-m:-:*:*:*:*:*:*:*

Information

Published : 2021-06-25 12:15

Updated : 2021-07-01 16:56


NVD link : CVE-2021-21005

Mitre link : CVE-2021-21005


JSON object : View

CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Advertisement

dedicated server usa

Products Affected

phoenixcontact

  • fl_switch_smcs_8tx_firmware
  • fl_switch_smcs_8tx-pn
  • fl_switch_smcs_6tx\/2sfp
  • fl_switch_smcs_14tx\/2fx
  • fl_switch_smcs_4tx-pn
  • fl_switch_smcs_8tx-pn_firmware
  • fl_switch_smn_6tx\/2fx
  • fl_switch_smcs_6gt\/2sfp_firmware
  • fl_switch_smcs_4tx-pn_firmware
  • fl_switch_smn_6tx\/2fx_firmware
  • fl_switch_smcs_8tx
  • fl_switch_smcs_14tx\/2fx_firmware
  • fl_nat_smn_8tx-m_firmware
  • fl_switch_smn_6tx\/2pof-pn_firmware
  • fl_switch_smcs_8gt
  • fl_nat_smn_8tx-m
  • fl_switch_smcs_14tx\/2fx-sm_firmware
  • fl_switch_smn_8tx-pn_firmware
  • fl_switch_smcs_6gt\/2sfp
  • fl_nat_smn_8tx
  • fl_switch_smn_6tx\/2pof-pn
  • fl_nat_smn_8tx_firmware
  • fl_switch_smcs_16tx_firmware
  • fl_switch_smcs_8gt_firmware
  • fl_switch_smcs_16tx
  • fl_switch_smcs_6tx\/2sfp_firmware
  • fl_switch_smn_6tx\/2fx_sm_firmware
  • fl_switch_smcs_14tx\/2fx-sm
  • fl_switch_smn_6tx\/2fx_sm
  • fl_switch_smn_8tx-pn