CVE-2021-33541— Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-33541
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of service on the PLC's network communication module. A successful attack stops all network communication. To restore the network connectivity the device needs to be restarted. The automation task is not affected.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
不加限制或调节的资源分配
Source: NVD (National Vulnerability Database)
Vulnerability Title
Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1是德国Phoenix Contac（Phoenix Contact）公司的一个工控设备。用于设备管理和通信的协议 配置不包含认证措施。 Phoenix Contact Classic Line Controllers ILC1x0版本和ILC1x1版本存在安全漏洞，远程攻击者可以使用特制的IP数据包在PLC的网络通信模块上造成拒绝服务。成功的攻击会停止所有网络通信。要恢复网络连接，设备需要重
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Phoenix Contact | ILC1x | ILC1x0 all variants | - |
II. Public POCs for CVE-2021-33541
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-33541
请登录查看更多情报信息。
- https://cert.vde.com/en-us/advisories/vde-2021-019x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2021-33541
Same Patch Batch · Phoenix Contact · 2021-06-25 · 7 CVEs total
| CVE-2021-33542 | 7.8 HIGH | Phoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vu |
| CVE-2021-21002 | 7.5 HIGH | Denial of Service in Phoenix Contact FL COMSERVER UNI products |
| CVE-2021-21005 | 7.5 HIGH | Race Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products |
| CVE-2021-21004 | 7.4 HIGH | Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products |
| CVE-2021-33540 | 7.3 HIGH | Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices |
| CVE-2021-21003 | 5.3 MEDIUM | Denial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series products |
IV. Related Vulnerabilities
Same vendor: Phoenix Contact
- CVE-2024-43384
Phoenix Contact: Improper removal of sensitive information i - CVE-2026-22323
Cross‑Site Request Forgery in Link Aggregation Configuration - CVE-2026-22322
Stored Cross‑Site Scripting in Link Aggregation Name Handlin - CVE-2026-22321
Stack-Based Buffer Overflow in CLI Login Username Handling o - CVE-2026-22320
Stack-Based Buffer Overflow in TFTP File-Transfer Command Ha
Same weakness: CWE-770
- CVE-2026-42294
Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in W - CVE-2026-42189
Russh: Pre-auth DoS via unbounded allocation in keyboard-int - CVE-2026-42793
Atom table exhaustion via attacker-controlled GraphQL SDL na - CVE-2026-44499
ZEBRA: Permanent Block Discovery Halt via Gossip Queue Satur - CVE-2026-44500
ZEBRA: Allocation Amplification in Inbound Network Deseriali
V. Comments for CVE-2021-33541
No comments yet