CVE-2021-33540: Phoenixcontact Axl F Bk Eip Ef Firmware

High severity, CVSS 7.3. EPSS: 0.7% chance of exploitation in the next 30 days.

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.

Affected products

• Phoenixcontact Axl F Bk Eip Ef Firmware: before 1.30 (fixed in 1.30)
• Phoenixcontact Axl F Bk Eip Firmware: before 1.30 (fixed in 1.30)
• Phoenixcontact Axl F Bk Eth Firmware: before 1.30 (fixed in 1.30)
• Phoenixcontact Axl F Bk Eth NET2 Firmware: any version
• Phoenixcontact Axl F Bk Eth Xc Firmware: before 1.30 (fixed in 1.30)
• Phoenixcontact Axl F Bk Pn Firmware: any version
• Phoenixcontact Axl F Bk Pn Tps Firmware: before 1.30 (fixed in 1.30)
• Phoenixcontact Axl F Bk Pn Tps Xc Firmware: before 1.30 (fixed in 1.30)
• Phoenixcontact Axl F Bk Pn Xc Firmware: any version
• Phoenixcontact Axl F Bk s35 Firmware: before 1.40 (fixed in 1.40)
• Phoenixcontact Axl F Bk Sas Firmware: any version
• Phoenixcontact Il Eip Bk DI8 DO4 2tx-Pac Firmware: any version
• Phoenixcontact Il Eth Bk DI8 DO4 2tx-Pac Firmware: any version
• Phoenixcontact Il Eth Bk DI8 DO4 2tx-Xc-Pac Firmware: any version
• Phoenixcontact Il Pn Bk-Pac Firmware: any version
• Phoenixcontact Il Pn Bk DI8 DO4 2scrj-Pac Firmware: any version
• Phoenixcontact Il Pn Bk DI8 DO4 2tx-Pac Firmware: any version
• Phoenixcontact Il s3 Bk DI8 DO4 2tx-Pac Firmware: any version

Published 2021-06-25. Last modified 2026-06-17.