7.3
CVSSv3

CVE-2021-33540

Published: 25/06/2021 Updated: 02/07/2021
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 7.3 | Impact Score: 3.4 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

phoenixcontact axl_f_bk_pn_tps_xc_firmware

phoenixcontact axl_f_bk_pn_tps_firmware

phoenixcontact axl_f_bk_eip_firmware

phoenixcontact axl_f_bk_eip_ef_firmware

phoenixcontact axl_f_bk_eth_firmware

phoenixcontact axl_f_bk_eth_xc_firmware

phoenixcontact axl_f_bk_s35_firmware

phoenixcontact axl_f_bk_pn_firmware

phoenixcontact axl_f_bk_pn_xc_firmware

phoenixcontact axl_f_bk_eth_net2_firmware

phoenixcontact axl_f_bk_sas_firmware

phoenixcontact il_pn_bk-pac_firmware

phoenixcontact il_pn_bk_di8_do4_2tx-pac_firmware

phoenixcontact il_pn_bk_di8_do4_2scrj-pac_firmware

phoenixcontact il_eth_bk_di8_do4_2tx-xc-pac_firmware

phoenixcontact il_eth_bk_di8_do4_2tx-pac_firmware

phoenixcontact il_eip_bk_di8_do4_2tx-pac_firmware

phoenixcontact il_s3_bk_di8_do4_2tx-pac_firmware