VDE-2021-022
Vulnerability from csaf_phoenixcontactgmbhcokg - Published: 2021-06-23 12:16 - Updated: 2025-05-14 12:28Summary
PHOENIX CONTACT: Security Advisory for FL COMSERVER UNI
Notes
Summary: When the communication partner sends an invalid Modbus exception response to the FL COMSERVER UNI as a query, the Modbus communication stops, and the device will be unresponsive for some minutes before the functionality is fully restored (CWE-772).
Remediation: PHOENIX CONTACT recommends affected users to upgrade to the latest firmware version which is available for download.
| **Product Number** | **Product Name** | **Firmware Version** |
|--------------------|------------------------------------|-----------------------------|
| 2313452 | FL COMSERVER UNI 232/422/485 | 2.41 |
| 2904817 | FL COMSERVER UNI 232/422/485-T | 2.41 |
Impact: An attacker may use this vulnerability to execute a Denial of Service (DoS) attack.
In Phoenix Contact FL COMSERVER UNI in versions <2.40 a invalid Modbus exception response can lead to a temporary denial of service.
7.5 (High)
Mitigation
Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our application note:
Measures to protect network-capable devices with Ethernet connection
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-31001 | — | ||
| Unresolved product id: CSAFPID-31002 | — |
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-32001 | — | ||
| Unresolved product id: CSAFPID-32002 | — |
References
3 references
Acknowledgments
{
"document": {
"acknowledgments": [
{
"organization": "CERT@VDE",
"summary": "coordination",
"urls": [
"https://certvde.com"
]
},
{
"names": [
"Petri Tuomio"
],
"organization": "Waertsilae PSIRT",
"summary": "discovered and reported"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "summary",
"text": "When the communication partner sends an invalid Modbus exception response to the FL COMSERVER UNI as a query, the Modbus communication stops, and the device will be unresponsive for some minutes before the functionality is fully restored (CWE-772).",
"title": "Summary"
},
{
"category": "description",
"text": "PHOENIX CONTACT recommends affected users to upgrade to the latest firmware version which is available for download.\n| **Product Number** | **Product Name** | **Firmware Version** |\n|--------------------|------------------------------------|-----------------------------|\n| 2313452 | FL COMSERVER UNI 232/422/485 | 2.41 |\n| 2904817 | FL COMSERVER UNI 232/422/485-T | 2.41 |\n",
"title": "Remediation"
},
{
"category": "description",
"text": "An attacker may use this vulnerability to execute a Denial of Service (DoS) attack.",
"title": "Impact"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@phoenixcontact.com",
"name": "Phoenix Contact GmbH \u0026 Co. KG",
"namespace": "https://phoenixcontact.com/psirt"
},
"references": [
{
"category": "external",
"summary": "PHOENIX CONTACT advisory overview at CERT@VDE",
"url": "https://certvde.com/en/advisories/vendor/phoenixcontact/"
},
{
"category": "self",
"summary": "VDE-2021-022: PHOENIX CONTACT: Security Advisory for FL COMSERVER UNI - HTML",
"url": "https://certvde.com/en/advisories/VDE-2021-022"
},
{
"category": "self",
"summary": "VDE-2021-022: PHOENIX CONTACT: Security Advisory for FL COMSERVER UNI - CSAF",
"url": "https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2021/vde-2021-022.json"
}
],
"title": "PHOENIX CONTACT: Security Advisory for FL COMSERVER UNI",
"tracking": {
"aliases": [
"VDE-2021-022"
],
"current_release_date": "2025-05-14T12:28:19.000Z",
"generator": {
"date": "2025-02-10T08:35:43.259Z",
"engine": {
"name": "Secvisogram",
"version": "2.5.18"
}
},
"id": "VDE-2021-022",
"initial_release_date": "2021-06-23T12:16:00.000Z",
"revision_history": [
{
"date": "2021-06-23T12:16:00.000Z",
"number": "1",
"summary": "Initial revision."
},
{
"date": "2025-02-10T09:00:00.000Z",
"number": "2",
"summary": "Update: Provider data has been corrected"
},
{
"date": "2025-05-14T12:28:19.000Z",
"number": "3",
"summary": "Fix: version space, firmware category, added distribution"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "FL COMSERVER UNI 232/422/485",
"product": {
"name": "FL COMSERVER UNI 232/422/485",
"product_id": "CSAFPID-11001",
"product_identification_helper": {
"model_numbers": [
"2313452"
]
}
}
},
{
"category": "product_name",
"name": "FL COMSERVER UNI 232/422/485-T",
"product": {
"name": "FL COMSERVER UNI 232/422/485-T",
"product_id": "CSAFPID-11002",
"product_identification_helper": {
"model_numbers": [
"2904817"
]
}
}
}
],
"category": "product_family",
"name": "Hardware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.40",
"product": {
"name": " Firmware \u003c2.40",
"product_id": "CSAFPID-21001"
}
},
{
"category": "product_version",
"name": "2.41",
"product": {
"name": "Firmware 2.41",
"product_id": "CSAFPID-22001"
}
}
],
"category": "product_family",
"name": "Firmware"
}
],
"category": "vendor",
"name": "PHOENIX CONTACT"
}
],
"product_groups": [
{
"group_id": "CSAFGID-0001",
"product_ids": [
"CSAFPID-31001",
"CSAFPID-31002"
],
"summary": "Affected Products."
},
{
"group_id": "CSAFGID-0002",
"product_ids": [
"CSAFPID-32001",
"CSAFPID-32002"
],
"summary": "fixed product."
}
],
"relationships": [
{
"category": "installed_on",
"full_product_name": {
"name": " Firmware \u003c2.40 installed on FL COMSERVER UNI 232/422/485",
"product_id": "CSAFPID-31001"
},
"product_reference": "CSAFPID-21001",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": " Firmware \u003c2.40 installed on FL COMSERVER UNI 232/422/485-T",
"product_id": "CSAFPID-31002"
},
"product_reference": "CSAFPID-21001",
"relates_to_product_reference": "CSAFPID-11002"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware 2.41 installed on FL COMSERVER UNI 232/422/485",
"product_id": "CSAFPID-32001"
},
"product_reference": "CSAFPID-22001",
"relates_to_product_reference": "CSAFPID-11001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware 2.41 installed on FL COMSERVER UNI 232/422/485-T",
"product_id": "CSAFPID-32002"
},
"product_reference": "CSAFPID-22001",
"relates_to_product_reference": "CSAFPID-11002"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-21002",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"notes": [
{
"category": "description",
"text": "In Phoenix Contact FL COMSERVER UNI in versions \u003c2.40 a invalid Modbus exception response can lead to a temporary denial of service.",
"title": "Vulnerability Description"
}
],
"product_status": {
"fixed": [
"CSAFPID-32001",
"CSAFPID-32002"
],
"known_affected": [
"CSAFPID-31001",
"CSAFPID-31002"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our application note:\nMeasures to protect network-capable devices with Ethernet connection",
"group_ids": [
"CSAFGID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 7.5,
"environmentalSeverity": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-31001",
"CSAFPID-31002"
]
}
],
"title": "CVE-2021-21002"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…