What’s Vulnerable › Products

Phoenixcontact Plcnext Firmware vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Phoenixcontact Plcnext Firmware version is affected

Latest Phoenixcontact Plcnext Firmware vulnerabilities

• CVE-2020-12521 — Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack. (CVSS 6.5)
• CVE-2020-12519 — Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges. (CVSS 9.8)
• CVE-2020-12518 — Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks. (CVSS 5.5)
• CVE-2020-12517 — Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation). (CVSS 9.0)