CVE-2021-21004

{"id": "CVE-2021-21004", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "info@cert.vde.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 2.1}]}, "published": "2021-06-25T19:15:08.730", "references": [{"url": "https://cert.vde.com/en-us/advisories/vde-2021-023", "tags": ["Not Applicable", "Third Party Advisory"], "source": "info@cert.vde.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}, {"type": "Secondary", "source": "info@cert.vde.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client."}, {"lang": "es", "value": "En los productos de la serie Phoenix Contact FL SWITCH SMCS en m\u00faltiples versiones, un atacante puede insertar c\u00f3digo malicioso por medio de tramas LLDP en la administraci\u00f3n basada en la web, que luego podr\u00eda ser ejecutado por el cliente"}], "lastModified": "2021-07-02T00:00:42.913", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_16tx_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CDDEB10-788C-415A-9755-64C162201992", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_16tx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "51C916CC-15CA-4F7F-83BC-4DB2C29A993C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_14tx\\/2fx_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA89CC68-7F88-4ACB-B78F-1F8CDB4E66E2", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_14tx\\/2fx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F857640B-80AC-4474-8315-60703D28EB84"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_14tx\\/2fx-sm_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "334E6016-A7D5-44E4-A118-2133B6CA406F", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_14tx\\/2fx-sm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "25EEA47E-625E-43AB-8D71-F068675A9E88"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_8gt_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F54B5E21-F02B-4AE6-862F-3E419B9C765A", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_8gt:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9E319EE0-0BE2-4C24-A426-26903F4D9924"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_6gt\\/2sfp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3D06010-FACB-44C2-9737-88FAA6693DA8", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_6gt\\/2sfp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2E1196AA-CD50-4799-86A2-DED0D56CB53A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_8tx-pn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B549DAB-C568-4E08-89F9-971B1DFBF008", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_8tx-pn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D38E31A8-E0A9-4BE1-ADD9-5660E5392B9E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_4tx-pn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16769058-19DC-4851-9AC9-2BB1C205E32F", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_4tx-pn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8A1C4B35-EE9B-4EAC-8A9B-E8188D3EB4EA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_8tx_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A86969BA-3F9C-424A-A003-95F537B63172", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_8tx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9EBF53F7-0B39-4E8A-B1F8-C99CAA062DF5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_6tx\\/2sfp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5AF58FC-0E28-467D-8167-C3DB6BE47C3E", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_6tx\\/2sfp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C98B0801-5CD9-4276-8E39-65C2DD5923BF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smn_6tx\\/2pof-pn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AE6705F-13EF-4685-9E62-D0E94C863A75", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smn_6tx\\/2pof-pn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "49EFD53E-6260-4B04-B866-8C7757FFE339"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smn_8tx-pn_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E7F051D-0EA6-442F-9470-D916971C45C0", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smn_8tx-pn:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E0289C54-7F31-4777-AD97-3D5CEF5E8E69"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smn_6tx\\/2fx_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "990CECCE-C438-4BDC-BCD9-D0BBA7E4C6F8", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smn_6tx\\/2fx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EC332621-9FEC-40E0-AE7A-76F13F7FCE57"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smn_6tx\\/2fx_sm_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F11861A4-B692-4781-B4CA-B48BE7ECD212", "versionEndIncluding": "4.70"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smn_6tx\\/2fx_sm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "01FD1C84-FFD7-48A1-8EC2-7D6AC4896266"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_nat_smn_8tx_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EFA2320-2E1C-49FC-BF70-12BE51770537", "versionEndIncluding": "4.63"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_nat_smn_8tx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "427C31A9-C301-4B24-808D-B46E054557D6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phoenixcontact:fl_nat_smn_8tx-m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC296B35-23D1-4AE8-AC95-E636A0523C66", "versionEndIncluding": "4.63"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phoenixcontact:fl_nat_smn_8tx-m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E8E560F4-EB19-4A41-A3CC-F88F7BA3BD65"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "info@cert.vde.com"}