CVE-2018-25112CWE-770
PHOENIX CONTACT: ILC 1x1 ETH Denial of Service
High · published June 4, 2025
What it is
An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the device.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00461 · 38.7th percentile
- Weakness
- CWE-770 · Allocation of Resources Without Limits or Throttling
- Published
- 2025-06-04T09:37Z
EPSS history
Timeline