CVE-2020-12521

Name of the Vulnerable Software and Affected Versions Phoenix Contact PLCnext Control Devices versions prior to 2021.0 LTS

Description A specially crafted LLDP packet may lead to a high system load in the PROFINET stack, causing failure of system services or a complete reboot.

Recommendations For versions prior to 2021.0 LTS, update to version 2021.0 LTS or later to resolve the issue. As a temporary workaround, consider restricting the reception of LLDP packets to minimize the risk of exploitation.