Phoenixcontact Fl Nat Smn 8tx Firmware vulnerabilities

4 CVEs affecting Phoenixcontact Fl Nat Smn 8tx Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-21005, published 2021-06-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-9744, published 2019-03-26. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from…
CVE-2021-21003, published 2021-06-25. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the…
CVE-2021-21005, published 2021-06-25. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will…
CVE-2021-21004, published 2021-06-25. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.