Phoenixcontact Fl Switch Smn 6tx/2fx Firmware vulnerabilities

3 CVEs affecting Phoenixcontact Fl Switch Smn 6tx/2fx Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-21005, published 2021-06-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-21003, published 2021-06-25. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the…
CVE-2021-21005, published 2021-06-25. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will…
CVE-2021-21004, published 2021-06-25. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.