CVE-2021-21004CWE-79

Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products

High · published June 25, 2021

CVSS v3.1
7.4
EPSS
1%
Percentile
47.0
In the wild
Unconfirmed
What it is

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00581 · 47.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-06-25T18:25Z
EPSS history
Timeline
  • 25 JUN 18:25Z
    Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products
    cvelistv5