CVE-2021-34570highCWE-20

CVE-2021-34570: high-severity vulnerability in Phoenix Contact PLCnext

Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.0%
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H