CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2021-21004
Medium (6.1) in phoenixcontact. EPSS 0.6% chance of exploitation in the next 30 days.
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phoenixcontact:fl_nat_smn_8tx-m_firmware
- phoenixcontact:fl_nat_smn_8tx_firmware
- phoenixcontact:fl_switch_smcs_14tx\/2fx-sm_firmware
- phoenixcontact:fl_switch_smcs_14tx\/2fx_firmware
- phoenixcontact:fl_switch_smcs_16tx_firmware
- phoenixcontact:fl_switch_smcs_4tx-pn_firmware
- phoenixcontact:fl_switch_smcs_6gt\/2sfp_firmware
- phoenixcontact:fl_switch_smcs_6tx\/2sfp_firmware
- phoenixcontact:fl_switch_smcs_8gt_firmware
- phoenixcontact:fl_switch_smcs_8tx-pn_firmware
- phoenixcontact:fl_switch_smcs_8tx_firmware
- phoenixcontact:fl_switch_smn_6tx\/2fx_firmware
- phoenixcontact:fl_switch_smn_6tx\/2fx_sm_firmware
- phoenixcontact:fl_switch_smn_6tx\/2pof-pn_firmware
- phoenixcontact:fl_switch_smn_8tx-pn_firmware