Approved changes feed: RSS · Atom

cpe:2.3:h:phoenixcontact:rfc_4072s:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorPhoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265)
ProductRfc 4072S (dc221011-8236-58b9-977c-fdf86bc65fe1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46144 not_vulnerable 2026-06-08 06:12:44.025095 PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check
MEDIUM (6.5)
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.
Published: 2023-12-14T14:08:07.244Z
Updated: 2024-10-01T06:18:18.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46142 not_vulnerable 2026-06-08 06:12:44.019050 PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control
HIGH (8.8)
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices.
Published: 2023-12-14T14:05:35.741Z
Updated: 2024-08-02T20:37:39.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34570 not_vulnerable 2026-06-08 05:32:14.100858 Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS
HIGH (7.5)
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.
Published: 2021-09-27T08:25:09.502Z
Updated: 2024-09-16T22:09:31.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12521 not_vulnerable 2026-06-08 05:17:58.526687 Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.
MEDIUM (6.5)
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.
Published: 2020-12-17T22:43:14.654Z
Updated: 2024-09-17T04:14:26.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12519 not_vulnerable 2026-06-08 05:17:58.525551 Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.
HIGH (8.8)
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges.
Published: 2020-12-17T22:43:14.555Z
Updated: 2024-09-17T01:21:36.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12518 not_vulnerable 2026-06-08 05:17:58.524167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12517 not_vulnerable 2026-06-08 05:17:58.521778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.