Files
CVEs-PoC/2021/CVE-2021-21003.md
T
2024-05-25 21:48:12 +02:00

20 lines
985 B
Markdown

### [CVE-2021-21003](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21003)
![](https://img.shields.io/static/v1?label=Product&message=FL%20NAT&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=FL%20SWITCH&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=SMCS%2016TX%20(2700996)%3C%3D%204.70%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=SMN%208TX%20(2989365)%3C%3D%204.63%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-404%20Improper%20Resource%20Shutdown%20or%20Release&color=brighgreen)
### Description
In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected.
### POC
#### Reference
- https://cert.vde.com/en-us/advisories/vde-2021-023
#### Github
No PoCs found on GitHub currently.