CVE-2021-21004
Estado: ModificadaMedia (6.1)—
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Puntuación base: 6.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.58%
- Percentil entre todas las CVEs puntuadas: 46
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (15)
Phoenixcontact — FL NAT SMN 8tx-m FirmwarePhoenixcontact — FL NAT SMN 8TX FirmwarePhoenixcontact — FL Switch Smcs 14tx/2fx-sm FirmwarePhoenixcontact — FL Switch Smcs 14tx/2fx FirmwarePhoenixcontact — FL Switch Smcs 16tx FirmwarePhoenixcontact — FL Switch Smcs 4tx-pn FirmwarePhoenixcontact — FL Switch Smcs 6gt/2sfp FirmwarePhoenixcontact — FL Switch Smcs 6tx/2sfp FirmwarePhoenixcontact — FL Switch Smcs 8GT FirmwarePhoenixcontact — FL Switch Smcs 8tx-pn FirmwarePhoenixcontact — FL Switch Smcs 8TX FirmwarePhoenixcontact — FL Switch SMN 6tx/2fx FirmwarePhoenixcontact — FL Switch SMN 6tx/2fx SM FirmwarePhoenixcontact — FL Switch SMN 6tx/2pof-pn FirmwarePhoenixcontact — FL Switch SMN 8tx-pn Firmware
CWE
- CWE-79
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-21004",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "info@cert.vde.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 7.4,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 4.7,
"exploitabilityScore": 2.1
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 6.1,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "info@cert.vde.com",
"affectedData": [
{
"vendor": "Phoenix Contact",
"product": "FL SWITCH",
"versions": [
{
"status": "affected",
"version": "SMCS 16TX (2700996)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMCS 14TX/2FX (2700997)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMCS 14TX/2FX-SM (2701466)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMCS 8GT (2891123)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMCS 6GT/2SFP (2891479)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMCS 8TX-PN (2989103)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMCS 4TX-PN (2989093)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMCS 8TX (2989226)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMCS 6TX/2SFP (2989323)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMN 6TX/2POF-PN (2700290)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMN 8TX-PN (2989501)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMN 6TX/2FX (2989543)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
},
{
"status": "affected",
"version": "SMN 6TX/2FX SM (2989556)",
"versionType": "custom",
"lessThanOrEqual": "4.70"
}
]
},
{
"vendor": "Phoenix Contact",
"product": "FL NAT",
"versions": [
{
"status": "affected",
"version": "SMN 8TX (2989365)",
"versionType": "custom",
"lessThanOrEqual": "4.63"
},
{
"status": "affected",
"version": "SMN 8TX-M (2702443)",
"versionType": "custom",
"lessThanOrEqual": "4.63"
}
]
}
]
}
],
"published": "2021-06-25T19:15:08.730",
"references": [
{
"url": "https://cert.vde.com/en-us/advisories/vde-2021-023",
"tags": [
"Not Applicable",
"Third Party Advisory"
],
"source": "info@cert.vde.com"
},
{
"url": "https://cert.vde.com/en-us/advisories/vde-2021-023",
"tags": [
"Not Applicable",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "info@cert.vde.com",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client."
},
{
"lang": "es",
"value": "En los productos de la serie Phoenix Contact FL SWITCH SMCS en múltiples versiones, un atacante puede insertar código malicioso por medio de tramas LLDP en la administración basada en la web, que luego podría ser ejecutado por el cliente"
}
],
"lastModified": "2026-06-17T03:34:38.610",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_16tx_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CDDEB10-788C-415A-9755-64C162201992",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_16tx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "51C916CC-15CA-4F7F-83BC-4DB2C29A993C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_14tx\\/2fx_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA89CC68-7F88-4ACB-B78F-1F8CDB4E66E2",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_14tx\\/2fx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F857640B-80AC-4474-8315-60703D28EB84"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_14tx\\/2fx-sm_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "334E6016-A7D5-44E4-A118-2133B6CA406F",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_14tx\\/2fx-sm:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "25EEA47E-625E-43AB-8D71-F068675A9E88"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_8gt_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F54B5E21-F02B-4AE6-862F-3E419B9C765A",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_8gt:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9E319EE0-0BE2-4C24-A426-26903F4D9924"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_6gt\\/2sfp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3D06010-FACB-44C2-9737-88FAA6693DA8",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_6gt\\/2sfp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2E1196AA-CD50-4799-86A2-DED0D56CB53A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_8tx-pn_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B549DAB-C568-4E08-89F9-971B1DFBF008",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_8tx-pn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D38E31A8-E0A9-4BE1-ADD9-5660E5392B9E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_4tx-pn_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16769058-19DC-4851-9AC9-2BB1C205E32F",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_4tx-pn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8A1C4B35-EE9B-4EAC-8A9B-E8188D3EB4EA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_8tx_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A86969BA-3F9C-424A-A003-95F537B63172",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_8tx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9EBF53F7-0B39-4E8A-B1F8-C99CAA062DF5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smcs_6tx\\/2sfp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5AF58FC-0E28-467D-8167-C3DB6BE47C3E",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smcs_6tx\\/2sfp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C98B0801-5CD9-4276-8E39-65C2DD5923BF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smn_6tx\\/2pof-pn_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AE6705F-13EF-4685-9E62-D0E94C863A75",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smn_6tx\\/2pof-pn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "49EFD53E-6260-4B04-B866-8C7757FFE339"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smn_8tx-pn_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E7F051D-0EA6-442F-9470-D916971C45C0",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smn_8tx-pn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E0289C54-7F31-4777-AD97-3D5CEF5E8E69"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smn_6tx\\/2fx_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "990CECCE-C438-4BDC-BCD9-D0BBA7E4C6F8",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smn_6tx\\/2fx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EC332621-9FEC-40E0-AE7A-76F13F7FCE57"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_switch_smn_6tx\\/2fx_sm_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F11861A4-B692-4781-B4CA-B48BE7ECD212",
"versionEndIncluding": "4.70"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_switch_smn_6tx\\/2fx_sm:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "01FD1C84-FFD7-48A1-8EC2-7D6AC4896266"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_nat_smn_8tx_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EFA2320-2E1C-49FC-BF70-12BE51770537",
"versionEndIncluding": "4.63"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_nat_smn_8tx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "427C31A9-C301-4B24-808D-B46E054557D6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:fl_nat_smn_8tx-m_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC296B35-23D1-4AE8-AC95-E636A0523C66",
"versionEndIncluding": "4.63"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:fl_nat_smn_8tx-m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E8E560F4-EB19-4A41-A3CC-F88F7BA3BD65"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "info@cert.vde.com"
}