CVE-2021-33540

I

n certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.

References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_pn_tps_xc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_pn_tps_xc:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_pn_tps_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_pn_tps:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_eip_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_eip:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_eip_ef_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_eip_ef:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_eth_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_eth:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_eth_xc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_eth_xc:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_s35_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_s35:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_pn:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_pn_xc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_pn_xc:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_eth_net2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_eth_net2:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:phoenixcontact:axl_f_bk_sas_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:axl_f_bk_sas:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:phoenixcontact:il_pn_bk-pac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:il_pn_bk-pac:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:phoenixcontact:il_pn_bk_di8_do4_2tx-pac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:il_pn_bk_di8_do4_2tx-pac:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:phoenixcontact:il_pn_bk_di8_do4_2scrj-pac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:il_pn_bk_di8_do4_2scrj-pac:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:phoenixcontact:il_eth_bk_di8_do4_2tx-xc-pac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:il_eth_bk_di8_do4_2tx-xc-pac:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:phoenixcontact:il_eth_bk_di8_do4_2tx-pac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:il_eth_bk_di8_do4_2tx-pac:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:phoenixcontact:il_eip_bk_di8_do4_2tx-pac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:il_eip_bk_di8_do4_2tx-pac:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:phoenixcontact:il_s3_bk_di8_do4_2tx-pac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:phoenixcontact:il_s3_bk_di8_do4_2tx-pac:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:09

Type Values Removed Values Added
References () https://cert.vde.com/en-us/advisories/vde-2021-021 - Third Party Advisory () https://cert.vde.com/en-us/advisories/vde-2021-021 - Third Party Advisory