Back to Database
Status published
High
CVE-2021-34570
Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS
Vulnerability Description
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-34570
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- The vulnerability was discovered by Oliver Carrigan of Dionach. We kindly appreciate the coordinated disclosure of these vulnerabilities by the finder. PHOENIX CONTACT thanks CERT@VDE for the coordination and support with this publication.
More from Phoenix Contact
View All →CVE-2025-41752
Reflected XSS vulnerability in pxc_portSfp.php
High
7.1
CVE-2025-41751
Reflected XSS vulnerability in pxc_portCntr.php
High
7.1
CVE-2025-41750
Reflected XSS vulnerability in pxc_PortCfg.php
High
7.1
CVE-2025-41749
Reflected XSS vulnerability in port_util.php
High
7.1
CVE-2025-41748
Reflected XSS vulnerability in pxc_Dot1xCfg.php
High
7.1
Affected Vendor
Phoenix Contact
View all reports →Affected Software
AXC F, RFC, PLCnext
Vulnerable Versions:
AXC F 1152 (1151412), AXC F 2152 (2404267), AXC F 3152 (1069208), AXC F 2152 Starterkit (1046568), RFC 4072S (1051328), PLCnext Technology Starterkit (1188165)
Timeline
Official Publish:
September 27th, 2021
Last Modified:
September 16th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H