Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-17	CVE-2020-12521	Improper Input Validation vulnerability in Phoenixcontact Plcnext Firmware On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. low complexity phoenixcontact CWE-20	6.5
2020-12-17	CVE-2020-12518	Information Exposure vulnerability in Phoenixcontact Plcnext Firmware On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks. local low complexity phoenixcontact CWE-200	5.5