CVE:CVE-2021-34570
CNNVD:CNNVD-202109-1749
Phoenix Contact PLCnext Control Devices是德国Phoenix Contact公司的一款应用于工业环境可编程逻辑控制器。
Phoenix Contact PLCnext Control Devices 2021.0.5LTS之前版本存在输入验证错误漏洞，该漏洞源于控制设备容易通过特殊制作的JSON请求受到DoS攻击。
solution:Upgrade phoenixcontact plcnext_technology_starterkit_firmware to a higher version than 2021.0.5,and avoid the version (,2021.0.5); Upgrade phoenixcontact axc_f_2152_starterkit_firmware to a higher version than 2021.0.5,and avoid the version (,2021.0.5); Upgrade phoenixcontact rfc_4072s_firmware to a higher version than 2021.0.5,and avoid the version (,2021.0.5); Upgrade phoenixcontact axc_f_3152_firmware to a higher version than 2021.0.5,and avoid the version (,2021.0.5); Upgrade phoenixcontact axc_f_1152_firmware to a higher version than 2021.0.5,and avoid the version (,2021.0.5); Upgrade phoenixcontact axc_f_2152_firmware to a higher version than 2021.0.5,and avoid the version (,2021.0.5)