Phoenixcontact Axc F 2152 Starterkit
7 CVEs affecting Phoenixcontact Axc F 2152 Starterkit. Latest disclosed: 2021-09-27. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-12519 | High | 8.8 | 2020-12-17 | On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges. |
CVE-2020-12517 | High | 8.8 | 2020-12-17 | On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin… |
CVE-2021-34570 | High | 7.5 | 2021-09-27 | Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests. |
CVE-2019-10998 | Medium | 6.8 | 2019-06-18 | An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Unlimite… |
CVE-2020-12521 | Medium | 6.5 | 2020-12-17 | On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An… |
CVE-2019-10997 | Medium | 5.9 | 2019-06-17 | An issue was discovered on Phoenix Contact AXC F 2152 (No.2404267) before 2019.0 LTS and AXC F 2152 STARTERKIT (No.1046568) before 2019.0 LTS devices. Protocol… |
CVE-2020-12518 | Medium | 5.5 | 2020-12-17 | On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitiv… |