{ "document": { "acknowledgments": [ { "organization": "CERT@VDE", "summary": "coordination", "urls": [ "https://certvde.com" ] }, { "organization": "Secuvera", "summary": "discovered" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en-US", "notes": [ { "category": "summary", "text": "An undocumented password protected FTP access to the root directory exists in certain devices of the AXL F BK and IL BK product families (CWE-798).", "title": "Summary" }, { "category": "description", "title": "Mitigation", "text": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our application note:\nMeasures to protect network-capable devices with Ethernet connection https://dam-mdc.phoenixcontact.com/asset/156443151564/0a870ae433c19148b80bd760f3a1c1f2/107913_en_03.pdf" }, { "title": "Remediation", "text": "For the following devices, a firmware update is available that disables the above-mentioned undocumented FTP access. PHOENIX CONTACT recommends upgrading these devices to the latest firmware.\n\n| Article No | Article | Fixed Version | FW Download |\n|------------|----------------------|-------------------|-------------------|\n| 1068857 | AXL F BK PN TPS XC | FW >1.30, HW 01 | [http://www.phoenixcontact.net/qr/1068857/firmware](#) |\n| 2403869 | AXL F BK PN TPS | FW >1.30, HW 02 | [http://www.phoenixcontact.net/qr/2403869/firmware](#) |\n| 2688394 | AXL F BK EIP | FW >1.30, HW 05 | [http://www.phoenixcontact.net/qr/2688394/firmware](#) |\n| 2702782 | AXL F BK EIP EF | FW >1.30, HW 01 | [http://www.phoenixcontact.net/qr/2702782/firmware](#) |\n| 2688459 | AXL F BK ETH | FW >1.30, HW 05 | [http://www.phoenixcontact.net/qr/2688459/firmware](#) |\n| 2701949 | AXL F BK ETH XC | FW >1.30, HW 05 | [http://www.phoenixcontact.net/qr/2701949/firmware](#) |\n| 2701686 | AXL F BK S3 | FW >1.40, HW 05 | [http://www.phoenixcontact.net/qr/2701686/firmware](#) |\n", "category": "description" }, { "category": "description", "title": "Impact", "text": "An attacker who was able to obtain the hard-coded password to FTP access could access the FTP area and read the scrambled monitoring information of the device." } ], "publisher": { "category": "vendor", "contact_details": "psirt@phoenixcontact.com", "name": "Phoenix Contact GmbH & Co. KG", "namespace": "https://phoenixcontact.com/psirt" }, "references": [ { "category": "external", "summary": "PHOENIX CONTACT advisory overview at CERT@VDE", "url": "https://certvde.com/de/advisories/vendor/hoenixcontact/" }, { "category": "self", "summary": "VDE-2021-021: PHOENIX CONTACT: Security Advisory for AXL F BK and IL BK products - HTML", "url": "https://certvde.com/en/advisories/VDE-2021-021" }, { "summary": "VDE-2021-021: PHOENIX CONTACT: Security Advisory for AXL F BK and IL BK products - CSAF", "url": "https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2021/vde-2021-021.json", "category": "self" } ], "title": "PHOENIX CONTACT: Security Advisory for AXL F BK and IL BK products", "tracking": { "aliases": [ "VDE-2021-021" ], "current_release_date": "2025-05-14T12:28:19.000Z", "generator": { "date": "2025-02-27T15:22:05.540Z", "engine": { "name": "Secvisogram", "version": "2.5.20" } }, "id": "VDE-2021-021", "initial_release_date": "2021-06-23T12:15:00.000Z", "revision_history": [ { "date": "2021-06-23T12:15:00.000Z", "number": "1", "summary": "Initial revision." }, { "number": "2", "summary": "Fix: version space, added distribution", "date": "2025-05-14T12:28:19.000Z" } ], "status": "final", "version": "2" } }, "product_tree": { "product_groups": [ { "group_id": "CSAFGID-0001", "summary": "Affected Products.", "product_ids": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018" ] }, { "group_id": "CSAFGID-0002", "summary": "Fixed Products", "product_ids": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007" ] } ], "branches": [ { "category": "vendor", "name": "PHOENIX CONTACT", "branches": [ { "name": "Hardware", "category": "product_family", "branches": [ { "name": "AXL F BK EIP EF (HW < 01)", "category": "product_name", "product": { "name": "AXL F BK EIP EF (HW < 01)", "product_id": "CSAFPID-11001", "product_identification_helper": { "model_numbers": [ "2702782" ] } } }, { "name": "AXL F BK EIP (HW < 05)", "category": "product_name", "product": { "name": "AXL F BK EIP (HW < 05)", "product_id": "CSAFPID-11002", "product_identification_helper": { "model_numbers": [ "2688394" ] } } }, { "name": "AXL F BK ETH (HW < 05)", "category": "product_name", "product": { "name": "AXL F BK ETH (HW < 05)", "product_id": "CSAFPID-11003", "product_identification_helper": { "model_numbers": [ "2688459" ] } } }, { "name": "AXL F BK ETH NET2", "category": "product_name", "product": { "name": "AXL F BK ETH NET2", "product_id": "CSAFPID-11004", "product_identification_helper": { "model_numbers": [ "2702177" ] } } }, { "name": "AXL F BK ETH XC (HW < 05)", "category": "product_name", "product": { "name": "AXL F BK ETH XC (HW < 05)", "product_id": "CSAFPID-11005", "product_identification_helper": { "model_numbers": [ "2701949" ] } } }, { "name": "AXL F BK PN", "category": "product_name", "product": { "name": "AXL F BK PN", "product_id": "CSAFPID-11006", "product_identification_helper": { "model_numbers": [ "2701815" ] } } }, { "name": "AXL F BK PN TPS (HW < 02)", "category": "product_name", "product": { "name": "AXL F BK PN TPS (HW < 02)", "product_id": "CSAFPID-11007", "product_identification_helper": { "model_numbers": [ "2403869" ] } } }, { "name": "AXL F BK PN TPS XC (HW < 01)", "category": "product_name", "product": { "name": "AXL F BK PN TPS XC (HW < 01)", "product_id": "CSAFPID-11008", "product_identification_helper": { "model_numbers": [ "1068857" ] } } }, { "name": "AXL F BK PN XC", "category": "product_name", "product": { "name": "AXL F BK PN XC", "product_id": "CSAFPID-11009", "product_identification_helper": { "model_numbers": [ "2701222" ] } } }, { "name": "AXL F BK S3 (HW < 05)", "category": "product_name", "product": { "name": "AXL F BK S3 (HW < 05)", "product_id": "CSAFPID-11010", "product_identification_helper": { "model_numbers": [ "2701686" ] } } }, { "name": "AXL F BK SAS", "category": "product_name", "product": { "name": "AXL F BK SAS", "product_id": "CSAFPID-11011", "product_identification_helper": { "model_numbers": [ "2701457" ] } } }, { "name": "IL EIP BK DI8 DO4 2TX-PAC", "category": "product_name", "product": { "name": "IL EIP BK DI8 DO4 2TX-PAC", "product_id": "CSAFPID-11012", "product_identification_helper": { "model_numbers": [ "2897758" ] } } }, { "name": "IL ETH BK DI8 DO4 2TX-PAC", "category": "product_name", "product": { "name": "IL ETH BK DI8 DO4 2TX-PAC", "product_id": "CSAFPID-11013", "product_identification_helper": { "model_numbers": [ "2703981" ] } } }, { "name": "IL ETH BK DI8 DO4 2TX-XC-PAC", "category": "product_name", "product": { "name": "IL ETH BK DI8 DO4 2TX-XC-PAC", "product_id": "CSAFPID-11014", "product_identification_helper": { "model_numbers": [ "2701388" ] } } }, { "name": "IL PN BK DI8 DO4 2SCRJ-PAC", "category": "product_name", "product": { "name": "IL PN BK DI8 DO4 2SCRJ-PAC", "product_id": "CSAFPID-11015", "product_identification_helper": { "model_numbers": [ "2878379" ] } } }, { "name": "IL PN BK DI8 DO4 2TX-PAC", "category": "product_name", "product": { "name": "IL PN BK DI8 DO4 2TX-PAC", "product_id": "CSAFPID-11016", "product_identification_helper": { "model_numbers": [ "2703994" ] } } }, { "name": "IL PN BK-PAC", "category": "product_name", "product": { "name": "IL PN BK-PAC", "product_id": "CSAFPID-11017", "product_identification_helper": { "model_numbers": [ "2403696" ] } } }, { "name": "IL S3 BK DI8 DO4 2TX-PAC", "category": "product_name", "product": { "name": "IL S3 BK DI8 DO4 2TX-PAC", "product_id": "CSAFPID-11018", "product_identification_helper": { "model_numbers": [ "2692380" ] } } } ] }, { "name": "Firmware", "category": "product_family", "branches": [ { "name": "<1.30", "category": "product_version_range", "product": { "name": "Firmware <1.30", "product_id": "CSAFPID-21001" } }, { "name": "<1.40", "category": "product_version_range", "product": { "name": "Firmware <1.40", "product_id": "CSAFPID-21002" } }, { "name": "FW1.30, HW 01", "category": "product_version", "product": { "name": "Firmware FW1.30, HW 01", "product_id": "CSAFPID-22001" } }, { "name": "FW1.30, HW 02", "category": "product_version", "product": { "name": "Firmware FW1.30, HW 02", "product_id": "CSAFPID-22002" } }, { "name": "FW1.30, HW 05", "category": "product_version", "product": { "name": "Firmware FW1.30, HW 05", "product_id": "CSAFPID-22003" } }, { "name": "FW1.40, HW 05", "category": "product_version", "product": { "name": "Firmware FW1.40, HW 05", "product_id": "CSAFPID-22004" } }, { "name": "vers:all/*", "category": "product_version_range", "product": { "name": "Firmware vers:all/*", "product_id": "CSAFPID-21003" } } ] } ] } ], "relationships": [ { "relates_to_product_reference": "CSAFPID-11001", "product_reference": "CSAFPID-21001", "category": "installed_on", "full_product_name": { "name": "Firmware <1.30 installed on AXL F BK EIP EF (HW < 01)", "product_id": "CSAFPID-31001" } }, { "relates_to_product_reference": "CSAFPID-11002", "product_reference": "CSAFPID-21001", "category": "installed_on", "full_product_name": { "name": "Firmware <1.30 installed on AXL F BK EIP (HW < 05)", "product_id": "CSAFPID-31002" } }, { "relates_to_product_reference": "CSAFPID-11003", "product_reference": "CSAFPID-22001", "category": "installed_on", "full_product_name": { "name": "Firmware FW1.30, HW 01 installed on AXL F BK ETH (HW < 05)", "product_id": "CSAFPID-31003" } }, { "relates_to_product_reference": "CSAFPID-11004", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on AXL F BK ETH NET2", "product_id": "CSAFPID-31004" } }, { "relates_to_product_reference": "CSAFPID-11005", "product_reference": "CSAFPID-21001", "category": "installed_on", "full_product_name": { "name": "Firmware <1.30 installed on AXL F BK ETH XC (HW < 05)", "product_id": "CSAFPID-31005" } }, { "relates_to_product_reference": "CSAFPID-11006", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on AXL F BK PN", "product_id": "CSAFPID-31006" } }, { "relates_to_product_reference": "CSAFPID-11007", "product_reference": "CSAFPID-21001", "category": "installed_on", "full_product_name": { "name": "Firmware <1.30 installed on AXL F BK PN TPS (HW < 02)", "product_id": "CSAFPID-31007" } }, { "relates_to_product_reference": "CSAFPID-11008", "product_reference": "CSAFPID-21001", "category": "installed_on", "full_product_name": { "name": "Firmware <1.30 installed on AXL F BK PN TPS XC (HW < 01)", "product_id": "CSAFPID-31008" } }, { "relates_to_product_reference": "CSAFPID-11009", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on AXL F BK PN XC", "product_id": "CSAFPID-31009" } }, { "relates_to_product_reference": "CSAFPID-11010", "product_reference": "CSAFPID-21002", "category": "installed_on", "full_product_name": { "name": "Firmware <1.40 installed on AXL F BK S3 (HW < 05)", "product_id": "CSAFPID-31010" } }, { "relates_to_product_reference": "CSAFPID-11011", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on AXL F BK SAS", "product_id": "CSAFPID-31011" } }, { "relates_to_product_reference": "CSAFPID-11012", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on IL EIP BK DI8 DO4 2TX-PAC", "product_id": "CSAFPID-31012" } }, { "relates_to_product_reference": "CSAFPID-11013", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on IL ETH BK DI8 DO4 2TX-PAC", "product_id": "CSAFPID-31013" } }, { "relates_to_product_reference": "CSAFPID-11014", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on IL ETH BK DI8 DO4 2TX-XC-PAC", "product_id": "CSAFPID-31014" } }, { "relates_to_product_reference": "CSAFPID-11015", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on IL PN BK DI8 DO4 2SCRJ-PAC", "product_id": "CSAFPID-31015" } }, { "relates_to_product_reference": "CSAFPID-11016", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on IL PN BK DI8 DO4 2TX-PAC", "product_id": "CSAFPID-31016" } }, { "relates_to_product_reference": "CSAFPID-11017", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on IL PN BK-PAC", "product_id": "CSAFPID-31017" } }, { "relates_to_product_reference": "CSAFPID-11018", "product_reference": "CSAFPID-21003", "category": "installed_on", "full_product_name": { "name": "Firmware vers:all/* installed on IL S3 BK DI8 DO4 2TX-PAC", "product_id": "CSAFPID-31018" } }, { "relates_to_product_reference": "CSAFPID-11008", "product_reference": "CSAFPID-22001", "category": "installed_on", "full_product_name": { "name": "Firmware FW1.30, HW 01 installed on AXL F BK PN TPS XC (HW < 01)", "product_id": "CSAFPID-32001" } }, { "relates_to_product_reference": "CSAFPID-11007", "product_reference": "CSAFPID-22002", "category": "installed_on", "full_product_name": { "name": "Firmware FW1.30, HW 02 installed on AXL F BK PN TPS (HW < 02)", "product_id": "CSAFPID-32002" } }, { "relates_to_product_reference": "CSAFPID-11001", "product_reference": "CSAFPID-22003", "category": "installed_on", "full_product_name": { "name": "Firmware FW1.30, HW 05 installed on AXL F BK EIP EF (HW < 01)", "product_id": "CSAFPID-32003" } }, { "relates_to_product_reference": "CSAFPID-11001", "product_reference": "CSAFPID-22001", "category": "installed_on", "full_product_name": { "name": "Firmware FW1.30, HW 01 installed on AXL F BK EIP EF (HW < 01)", "product_id": "CSAFPID-32004" } }, { "relates_to_product_reference": "CSAFPID-11003", "product_reference": "CSAFPID-22003", "category": "installed_on", "full_product_name": { "name": "Firmware FW1.30, HW 05 installed on AXL F BK ETH (HW < 05)", "product_id": "CSAFPID-32005" } }, { "relates_to_product_reference": "CSAFPID-11005", "product_reference": "CSAFPID-22003", "category": "installed_on", "full_product_name": { "name": "Firmware FW1.30, HW 05 installed on AXL F BK ETH XC (HW < 05)", "product_id": "CSAFPID-32006" } }, { "relates_to_product_reference": "CSAFPID-11010", "product_reference": "CSAFPID-22004", "category": "installed_on", "full_product_name": { "name": "Firmware FW1.40, HW 05 installed on AXL F BK S3 (HW < 05)", "product_id": "CSAFPID-32007" } } ] }, "vulnerabilities": [ { "cve": "CVE-2021-33540", "title": "CVE-2021-33540", "cwe": { "id": "CWE-798", "name": "Use of Hard-coded Credentials" }, "notes": [ { "title": "Vulnerability Description", "category": "description", "text": "In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists." } ], "product_status": { "known_affected": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018" ], "fixed": [ "CSAFPID-32001", "CSAFPID-32002", "CSAFPID-32003", "CSAFPID-32004", "CSAFPID-32005", "CSAFPID-32006", "CSAFPID-32007" ] }, "remediations": [ { "category": "mitigation", "details": "Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our application note:\nMeasures to protect network-capable devices with Ethernet connection https://dam-mdc.phoenixcontact.com/asset/156443151564/0a870ae433c19148b80bd760f3a1c1f2/107913_en_03.pdf", "group_ids": [ "CSAFGID-0001" ] }, { "details": "For the following devices, a firmware update is available that disables the above-mentioned undocumented FTP access. PHOENIX CONTACT recommends upgrading these devices to the latest firmware.\n\n| Article No | Article | Fixed Version | FW Download |\n|------------|----------------------|-------------------|-------------------|\n| 1068857 | AXL F BK PN TPS XC | FW >1.30, HW 01 | [http://www.phoenixcontact.net/qr/1068857/firmware](#) |\n| 2403869 | AXL F BK PN TPS | FW >1.30, HW 02 | [http://www.phoenixcontact.net/qr/2403869/firmware](#) |\n| 2688394 | AXL F BK EIP | FW >1.30, HW 05 | [http://www.phoenixcontact.net/qr/2688394/firmware](#) |\n| 2702782 | AXL F BK EIP EF | FW >1.30, HW 01 | [http://www.phoenixcontact.net/qr/2702782/firmware](#) |\n| 2688459 | AXL F BK ETH | FW >1.30, HW 05 | [http://www.phoenixcontact.net/qr/2688459/firmware](#) |\n| 2701949 | AXL F BK ETH XC | FW >1.30, HW 05 | [http://www.phoenixcontact.net/qr/2701949/firmware](#) |\n| 2701686 | AXL F BK S3 | FW >1.40, HW 05 | [http://www.phoenixcontact.net/qr/2701686/firmware](#) |\n", "category": "vendor_fix", "group_ids": [ "CSAFGID-0001" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "products": [ "CSAFPID-31001", "CSAFPID-31002", "CSAFPID-31003", "CSAFPID-31004", "CSAFPID-31005", "CSAFPID-31006", "CSAFPID-31007", "CSAFPID-31008", "CSAFPID-31009", "CSAFPID-31010", "CSAFPID-31011", "CSAFPID-31012", "CSAFPID-31013", "CSAFPID-31014", "CSAFPID-31015", "CSAFPID-31016", "CSAFPID-31017", "CSAFPID-31018" ] } ] } ] }