Vulnerabilites related to Phoenix Contact - AXC F 1152 (1151412)
cve-2020-12519
Vulnerability from cvelistv5
Published
2020-12-17 22:43
Modified
2024-09-17 01:21
Severity ?
EPSS score ?
Summary
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges.
References
| ▼ | URL | Tags |
|---|---|---|
| https://cert.vde.com/en-us/advisories/vde-2020-049 | x_refsource_CONFIRM |
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Phoenix Contact | AXC F 1152 (1151412) |
Version: unspecified < 2021.0 LTS |
||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T11:56:52.098Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "AXC F 1152 (1151412)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 2152 (2404267)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 3152 (1069208)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "RFC 4072S (1051328",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 2152 Starterkit (1046568)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "PLCnext Technology Starterkit (1188165)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Discovered by Patrick Muench, Torsten Loebner, Maurice Rothe, Pascal Keul and Daniel Hackel of SVA Systemvertrieb Alexander GmbH, coordinated by CERT@VDE"
}
],
"datePublic": "2020-12-17T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-12-17T22:43:14",
"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"shortName": "CERTVDE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
],
"solutions": [
{
"lang": "en",
"value": "Phoenix Contact recommends affected users to upgrade to the current Firmware 2021.0 LTS or higher which fixes these vulnerabilities."
}
],
"source": {
"advisory": "VDE-2020-049",
"defect": [
"VDE-2020-049"
],
"discovery": "EXTERNAL"
},
"title": "Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.",
"workarounds": [
{
"lang": "en",
"value": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note."
}
],
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "",
"ASSIGNER": "info@cert.vde.com",
"DATE_PUBLIC": "2020-12-17T09:00:00.000Z",
"ID": "CVE-2020-12519",
"STATE": "PUBLIC",
"TITLE": "Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges."
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "AXC F 1152 (1151412)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 2152 (2404267)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 3152 (1069208)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "RFC 4072S (1051328",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 2152 Starterkit (1046568)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "PLCnext Technology Starterkit (1188165)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
}
]
},
"vendor_name": "Phoenix Contact"
}
]
}
},
"configuration": [],
"credit": [
{
"lang": "eng",
"value": "Discovered by Patrick Muench, Torsten Loebner, Maurice Rothe, Pascal Keul and Daniel Hackel of SVA Systemvertrieb Alexander GmbH, coordinated by CERT@VDE"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges."
}
]
},
"exploit": [],
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-269 Improper Privilege Management"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert.vde.com/en-us/advisories/vde-2020-049",
"refsource": "CONFIRM",
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
]
},
"solution": [
{
"lang": "en",
"value": "Phoenix Contact recommends affected users to upgrade to the current Firmware 2021.0 LTS or higher which fixes these vulnerabilities."
}
],
"source": {
"advisory": "VDE-2020-049",
"defect": [
"VDE-2020-049"
],
"discovery": "EXTERNAL"
},
"work_around": [
{
"lang": "en",
"value": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note."
}
]
}
}
},
"cveMetadata": {
"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"assignerShortName": "CERTVDE",
"cveId": "CVE-2020-12519",
"datePublished": "2020-12-17T22:43:14.555150Z",
"dateReserved": "2020-04-30T00:00:00",
"dateUpdated": "2024-09-17T01:21:36.619Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2020-12518
Vulnerability from cvelistv5
Published
2020-12-17 22:43
Modified
2024-09-17 01:50
Severity ?
EPSS score ?
Summary
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.
References
| ▼ | URL | Tags |
|---|---|---|
| https://cert.vde.com/en-us/advisories/vde-2020-049 | x_refsource_CONFIRM |
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Phoenix Contact | AXC F 1152 (1151412) |
Version: unspecified < 2021.0 LTS |
||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T11:56:52.175Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "AXC F 1152 (1151412)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 2152 (2404267)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 3152 (1069208)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "RFC 4072S (1051328",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 2152 Starterkit (1046568)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "PLCnext Technology Starterkit (1188165)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Discovered by Patrick Muench, Torsten Loebner, Maurice Rothe, Pascal Keul and Daniel Hackel of SVA Systemvertrieb Alexander GmbH, coordinated by CERT@VDE"
}
],
"datePublic": "2020-12-17T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Information Exposure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-12-17T22:43:14",
"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"shortName": "CERTVDE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
],
"solutions": [
{
"lang": "en",
"value": "Phoenix Contact recommends affected users to upgrade to the current Firmware 2021.0 LTS or higher which fixes these vulnerabilities."
}
],
"source": {
"advisory": "VDE-2020-049",
"defect": [
"VDE-2020-049"
],
"discovery": "EXTERNAL"
},
"title": "Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.",
"workarounds": [
{
"lang": "en",
"value": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note."
}
],
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "",
"ASSIGNER": "info@cert.vde.com",
"DATE_PUBLIC": "2020-12-17T09:00:00.000Z",
"ID": "CVE-2020-12518",
"STATE": "PUBLIC",
"TITLE": "Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks."
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "AXC F 1152 (1151412)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 2152 (2404267)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 3152 (1069208)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "RFC 4072S (1051328",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 2152 Starterkit (1046568)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "PLCnext Technology Starterkit (1188165)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
}
]
},
"vendor_name": "Phoenix Contact"
}
]
}
},
"configuration": [],
"credit": [
{
"lang": "eng",
"value": "Discovered by Patrick Muench, Torsten Loebner, Maurice Rothe, Pascal Keul and Daniel Hackel of SVA Systemvertrieb Alexander GmbH, coordinated by CERT@VDE"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks."
}
]
},
"exploit": [],
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-200 Information Exposure"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert.vde.com/en-us/advisories/vde-2020-049",
"refsource": "CONFIRM",
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
]
},
"solution": [
{
"lang": "en",
"value": "Phoenix Contact recommends affected users to upgrade to the current Firmware 2021.0 LTS or higher which fixes these vulnerabilities."
}
],
"source": {
"advisory": "VDE-2020-049",
"defect": [
"VDE-2020-049"
],
"discovery": "EXTERNAL"
},
"work_around": [
{
"lang": "en",
"value": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note."
}
]
}
}
},
"cveMetadata": {
"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"assignerShortName": "CERTVDE",
"cveId": "CVE-2020-12518",
"datePublished": "2020-12-17T22:43:14.453367Z",
"dateReserved": "2020-04-30T00:00:00",
"dateUpdated": "2024-09-17T01:50:39.329Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2020-12521
Vulnerability from cvelistv5
Published
2020-12-17 22:43
Modified
2024-09-17 04:14
Severity ?
EPSS score ?
Summary
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.
References
| ▼ | URL | Tags |
|---|---|---|
| https://cert.vde.com/en-us/advisories/vde-2020-049 | x_refsource_CONFIRM |
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Phoenix Contact | AXC F 1152 (1151412) |
Version: unspecified < 2021.0 LTS |
||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T11:56:52.105Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "AXC F 1152 (1151412)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 2152 (2404267)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 3152 (1069208)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "RFC 4072S (1051328",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 2152 Starterkit (1046568)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "PLCnext Technology Starterkit (1188165)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Phoenix Contact reported to CERT@VDE"
}
],
"datePublic": "2020-12-17T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-12-17T22:43:14",
"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"shortName": "CERTVDE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
],
"solutions": [
{
"lang": "en",
"value": "Phoenix Contact recommends affected users to upgrade to the current Firmware 2021.0 LTS or higher which fixes these vulnerabilities."
}
],
"source": {
"advisory": "VDE-2020-049",
"defect": [
"VDE-2020-049"
],
"discovery": "EXTERNAL"
},
"title": "Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.",
"workarounds": [
{
"lang": "en",
"value": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note."
}
],
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "",
"ASSIGNER": "info@cert.vde.com",
"DATE_PUBLIC": "2020-12-17T09:00:00.000Z",
"ID": "CVE-2020-12521",
"STATE": "PUBLIC",
"TITLE": "Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack."
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "AXC F 1152 (1151412)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 2152 (2404267)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 3152 (1069208)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "RFC 4072S (1051328",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 2152 Starterkit (1046568)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "PLCnext Technology Starterkit (1188165)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
}
]
},
"vendor_name": "Phoenix Contact"
}
]
}
},
"configuration": [],
"credit": [
{
"lang": "eng",
"value": "Phoenix Contact reported to CERT@VDE"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot."
}
]
},
"exploit": [],
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-20 Improper Input Validation"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert.vde.com/en-us/advisories/vde-2020-049",
"refsource": "CONFIRM",
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
]
},
"solution": [
{
"lang": "en",
"value": "Phoenix Contact recommends affected users to upgrade to the current Firmware 2021.0 LTS or higher which fixes these vulnerabilities."
}
],
"source": {
"advisory": "VDE-2020-049",
"defect": [
"VDE-2020-049"
],
"discovery": "EXTERNAL"
},
"work_around": [
{
"lang": "en",
"value": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note."
}
]
}
}
},
"cveMetadata": {
"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"assignerShortName": "CERTVDE",
"cveId": "CVE-2020-12521",
"datePublished": "2020-12-17T22:43:14.654841Z",
"dateReserved": "2020-04-30T00:00:00",
"dateUpdated": "2024-09-17T04:14:26.064Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2020-12517
Vulnerability from cvelistv5
Published
2020-12-17 22:43
Modified
2024-09-16 22:10
Severity ?
EPSS score ?
Summary
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).
References
| ▼ | URL | Tags |
|---|---|---|
| https://cert.vde.com/en-us/advisories/vde-2020-049 | x_refsource_CONFIRM |
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Phoenix Contact | AXC F 1152 (1151412) |
Version: unspecified < 2021.0 LTS |
||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T11:56:52.103Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "AXC F 1152 (1151412)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 2152 (2404267)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 3152 (1069208)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "RFC 4072S (1051328",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "AXC F 2152 Starterkit (1046568)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "PLCnext Technology Starterkit (1188165)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "2021.0 LTS",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Discovered by Patrick Muench, Torsten Loebner, Maurice Rothe, Pascal Keul and Daniel Hackel of SVA Systemvertrieb Alexander GmbH, coordinated by CERT@VDE"
}
],
"datePublic": "2020-12-17T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation)."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Cross-site Scripting (XSS)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-12-17T22:43:14",
"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"shortName": "CERTVDE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
],
"solutions": [
{
"lang": "en",
"value": "Phoenix Contact recommends affected users to upgrade to the current Firmware 2021.0 LTS or higher which fixes these vulnerabilities."
}
],
"source": {
"advisory": "VDE-2020-049",
"defect": [
"VDE-2020-049"
],
"discovery": "EXTERNAL"
},
"title": "Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).",
"workarounds": [
{
"lang": "en",
"value": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note."
}
],
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "",
"ASSIGNER": "info@cert.vde.com",
"DATE_PUBLIC": "2020-12-17T09:00:00.000Z",
"ID": "CVE-2020-12517",
"STATE": "PUBLIC",
"TITLE": "Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation)."
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "AXC F 1152 (1151412)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 2152 (2404267)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 3152 (1069208)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "RFC 4072S (1051328",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "AXC F 2152 Starterkit (1046568)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
},
{
"product_name": "PLCnext Technology Starterkit (1188165)",
"version": {
"version_data": [
{
"platform": "",
"version_affected": "\u003c",
"version_name": "",
"version_value": "2021.0 LTS"
}
]
}
}
]
},
"vendor_name": "Phoenix Contact"
}
]
}
},
"configuration": [],
"credit": [
{
"lang": "eng",
"value": "Discovered by Patrick Muench, Torsten Loebner, Maurice Rothe, Pascal Keul and Daniel Hackel of SVA Systemvertrieb Alexander GmbH, coordinated by CERT@VDE"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation)."
}
]
},
"exploit": [],
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Cross-site Scripting (XSS)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert.vde.com/en-us/advisories/vde-2020-049",
"refsource": "CONFIRM",
"url": "https://cert.vde.com/en-us/advisories/vde-2020-049"
}
]
},
"solution": [
{
"lang": "en",
"value": "Phoenix Contact recommends affected users to upgrade to the current Firmware 2021.0 LTS or higher which fixes these vulnerabilities."
}
],
"source": {
"advisory": "VDE-2020-049",
"defect": [
"VDE-2020-049"
],
"discovery": "EXTERNAL"
},
"work_around": [
{
"lang": "en",
"value": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note."
}
]
}
}
},
"cveMetadata": {
"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"assignerShortName": "CERTVDE",
"cveId": "CVE-2020-12517",
"datePublished": "2020-12-17T22:43:14.320752Z",
"dateReserved": "2020-04-30T00:00:00",
"dateUpdated": "2024-09-16T22:10:20.898Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}