CVE-2021-21004 | BDVDB-2026-155997 Detail
Phoenix ContactFL SWITCH
Description#
In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact high, availability impact none. Attack vector: adjacent.
Weaknesses#
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.