Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.

6.5 CVSS

Vulnerability Description

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12521

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Phoenix Contact reported to CERT@VDE

References

https://cert.vde.com/en-us/advisories/vde-2020-049

More from Phoenix Contact

View All →

CVE-2025-41752

Reflected XSS vulnerability in pxc_portSfp.php

High 7.1

CVE-2025-41751

Reflected XSS vulnerability in pxc_portCntr.php

High 7.1

CVE-2025-41750

Reflected XSS vulnerability in pxc_PortCfg.php

High 7.1

CVE-2025-41749

Reflected XSS vulnerability in port_util.php

High 7.1

CVE-2025-41748

Reflected XSS vulnerability in pxc_Dot1xCfg.php

High 7.1

Affected Vendor

Phoenix Contact

View all reports →

Affected Software

AXC F 1152 (1151412), AXC F 2152 (2404267), AXC F 3152 (1069208), RFC 4072S (1051328, AXC F 2152 Starterkit (1046568), PLCnext Technology Starterkit (1188165)

Vulnerable Versions:

unspecified