CVE-2021-34570
7.5 highEPSS 1.0%
High (7.5) in phoenixcontact. EPSS 1.0% chance of exploitation in the next 30 days.
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.
Severity
CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phoenixcontact:axc_f_1152_firmware
- phoenixcontact:axc_f_2152_firmware
- phoenixcontact:axc_f_2152_starterkit_firmware
- phoenixcontact:axc_f_3152_firmware
- phoenixcontact:plcnext_technology_starterkit_firmware
- phoenixcontact:rfc_4072s_firmware
References
Check your stackJSON