Vulnerability · Published Jun 25, 2021 · Assigned by CERTVDE

CVE-2021-33541Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability

High 7.5

In plain English

A high-severity resource allocation without limits in ILC1x from Phoenix Contact. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)1.5%top 25.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of service on the PLC's network communication module. A successful attack stops all network communication. To restore the network connectivity the device needs to be restarted. The automation task is not affected.

Affected products (as reported)

Vendor	Product	Versions
Phoenix Contact	ILC1x	ILC1x0 all variantsILC1x1 all variants

Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://cert.vde.com/en-us/advisories/vde-2021-019 x_refsource_CONFIRM