CVE-2018-25112
PHOENIX CONTACT: ILC 1x1 ETH Denial of Service
- State
- Published
- Severity
- 7.5 High
- Published
- Jun 4, 2025
- Updated
- Jun 4, 2025
- Reserved
- Jun 4, 2025
Description
An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | CERTVDE |
Weaknesses
- CWE-770 Allocation of Resources Without Limits or Throttling
Affected Products
| Product | Versions |
|---|---|
ILC 131PHOENIX CONTACT |
|
ILC 151PHOENIX CONTACT |
|
ILC 171PHOENIX CONTACT |
|
ILC 191 ETHPHOENIX CONTACT |
|
References
- https://certvde.com/en/advisories/VDE-2018-012/vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.