{"id":"CVE-2021-20986","state":"PUBLISHED","title":"Hilscher: Denial of Service vulnerability in PROFINET IO Device","description":"A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.","publishedAt":"2021-02-16T16:35:48.460Z","updatedAt":"2024-09-16T23:46:42.601Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"CERTVDE"},"assigner":"CERTVDE","products":["Hilscher PROFINET IO Device","Pepper+Fuchs PCV/PXV/PGV","Pepper+Fuchs PXV/PGV B28 Profisafe","Pepper+Fuchs OHV","Pepper+Fuchs OIT","Pepper+Fuchs PHA","Pepper+Fuchs WCS"],"affected":[{"vendor":"Hilscher","product":"PROFINET IO Device","versions":[{"version":"V3","status":"affected","lessThan":"V3.14.0.7","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"PCV/PXV/PGV","versions":[{"version":"PGV100-F200A-B17-V1D, PGV150I-F200A-B17-V1D, PGV100-F200-B17-V1D-7477","status":"affected","lessThanOrEqual":"V2.0.0","versionType":"custom"},{"version":"PXV100-F200-B17-V1D, PXV100-F200-B17-V1D-3636","status":"affected","lessThanOrEqual":"V4.2.0","versionType":"custom"},{"version":"PCV80-F200-B17-V1D, PCV100-F200-B17-V1D, PCV50-F200-B17-V1D, PCV100-F200-B17-V1D-6011-6997","status":"affected","lessThanOrEqual":"V3.2.3","versionType":"custom"},{"version":"PCV100-F200-B17-V1D-6011, PCV100-F200-B17-V1D-6011-8203","status":"affected","lessThanOrEqual":"V3.2.5","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"PXV/PGV B28 Profisafe","versions":[{"version":"PXV100A-F200-B28-V1D, PXV100A-F200-B28-V1D-6011, PGV100A-F200-B28-V1D, PGV100A-F200A-B28-V1D","status":"affected","lessThanOrEqual":"V1.0.3","versionType":"custom"},{"version":"PGV100AQ-F200A-B28-V1D, PGV100AQ-F200-B28-V1D, PXV100AQ-F200-B28-V1D, PXV100AQ-F200-B28-V1D-6011","status":"affected","lessThanOrEqual":"V2.1.1","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"OHV","versions":[{"version":"OHV-F230-B17","status":"affected","lessThanOrEqual":"V1.1.0","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"OIT","versions":[{"version":"OIT500-F113-B17-CB","status":"affected","lessThanOrEqual":"V1.3.4","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"PHA","versions":[{"version":"PHA300-F200-B17-V1D, PHA400-F200-B17-V1D, PHA300-F200A-B17-V1D, PHA300-F200-B17-T-V1D, PHA200-F200A-B17-V1D, PHA200-F200-B17-V1D, PHA400-F200A-B17-V1D, PHA300-F200A-B17-T-V1D, PHA600-F200A-B17-V1D, PHA500-F200-B17-V1D, PHA500-F200A-B17-V1D, PHA600-F200-B17-V1D, PHA150-F200A-B17-V1D, PHA200-F200A-B17-T-V1D, PHA150-F200-B17-V1D, PHA800-F200-B17-V1D, PHA400-F200A-B17-T-V1D, PHA500-F200A-B17-T-V1D, PHA700-F200-B17-V1D","status":"affected","lessThanOrEqual":"V3.1.5","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"WCS","versions":[{"version":"WCS3B-LS610, WCS3B-LS610H, WCS3B-LS610D, WCS3B-LS610DH, WCS3B-LS610H-OM, WCS3B-LS610DH-OM, WCS3B-LS610D-OM, CS3B-LS610-OM","status":"affected","lessThanOrEqual":"V3.0.0","versionType":"custom"}]}],"references":["https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device","https://cert.vde.com/en-us/advisories/vde-2021-006"],"weaknesses":["CWE-787"],"ingestedAt":"2026-10-29T19:47:55.610Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/20xxx/CVE-2021-20986.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-20986","state":"PUBLISHED","datePublished":"2021-02-16T16:35:48.460Z","dateUpdated":"2024-09-16T23:46:42.601Z","assignerShortName":"CERTVDE","assignerOrgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateReserved":"2020-12-17T00:00:00.000Z"},"containers":{"cna":{"title":"Hilscher: Denial of Service vulnerability in PROFINET IO Device","descriptions":[{"lang":"en","value":"A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication."}],"affected":[{"vendor":"Hilscher","product":"PROFINET IO Device","versions":[{"version":"V3","status":"affected","lessThan":"V3.14.0.7","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"PCV/PXV/PGV","versions":[{"version":"PGV100-F200A-B17-V1D, PGV150I-F200A-B17-V1D, PGV100-F200-B17-V1D-7477","status":"affected","lessThanOrEqual":"V2.0.0","versionType":"custom"},{"version":"PXV100-F200-B17-V1D, PXV100-F200-B17-V1D-3636","status":"affected","lessThanOrEqual":"V4.2.0","versionType":"custom"},{"version":"PCV80-F200-B17-V1D, PCV100-F200-B17-V1D, PCV50-F200-B17-V1D, PCV100-F200-B17-V1D-6011-6997","status":"affected","lessThanOrEqual":"V3.2.3","versionType":"custom"},{"version":"PCV100-F200-B17-V1D-6011, PCV100-F200-B17-V1D-6011-8203","status":"affected","lessThanOrEqual":"V3.2.5","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"PXV/PGV B28 Profisafe","versions":[{"version":"PXV100A-F200-B28-V1D, PXV100A-F200-B28-V1D-6011, PGV100A-F200-B28-V1D, PGV100A-F200A-B28-V1D","status":"affected","lessThanOrEqual":"V1.0.3","versionType":"custom"},{"version":"PGV100AQ-F200A-B28-V1D, PGV100AQ-F200-B28-V1D, PXV100AQ-F200-B28-V1D, PXV100AQ-F200-B28-V1D-6011","status":"affected","lessThanOrEqual":"V2.1.1","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"OHV","versions":[{"version":"OHV-F230-B17","status":"affected","lessThanOrEqual":"V1.1.0","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"OIT","versions":[{"version":"OIT500-F113-B17-CB","status":"affected","lessThanOrEqual":"V1.3.4","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"PHA","versions":[{"version":"PHA300-F200-B17-V1D, PHA400-F200-B17-V1D, PHA300-F200A-B17-V1D, PHA300-F200-B17-T-V1D, PHA200-F200A-B17-V1D, PHA200-F200-B17-V1D, PHA400-F200A-B17-V1D, PHA300-F200A-B17-T-V1D, PHA600-F200A-B17-V1D, PHA500-F200-B17-V1D, PHA500-F200A-B17-V1D, PHA600-F200-B17-V1D, PHA150-F200A-B17-V1D, PHA200-F200A-B17-T-V1D, PHA150-F200-B17-V1D, PHA800-F200-B17-V1D, PHA400-F200A-B17-T-V1D, PHA500-F200A-B17-T-V1D, PHA700-F200-B17-V1D","status":"affected","lessThanOrEqual":"V3.1.5","versionType":"custom"}]},{"vendor":"Pepper+Fuchs","product":"WCS","versions":[{"version":"WCS3B-LS610, WCS3B-LS610H, WCS3B-LS610D, WCS3B-LS610DH, WCS3B-LS610H-OM, WCS3B-LS610DH-OM, WCS3B-LS610D-OM, CS3B-LS610-OM","status":"affected","lessThanOrEqual":"V3.0.0","versionType":"custom"}]}],"references":[{"url":"https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device","tags":["x_refsource_CONFIRM"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2021-006","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"CERTVDE","dateUpdated":"2021-02-16T16:35:48.000Z","orgId":"270ccfa6-a436-4e77-922e-914ec3a9685c"},"datePublic":"2021-02-15T00:00:00.000Z","source":{"advisory":"vde-2021-006","defect":["vde-2021-006"],"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"info@cert.vde.com","DATE_PUBLIC":"2021-02-15T13:00:00.000Z","ID":"CVE-2021-20986","STATE":"PUBLIC","TITLE":"Hilscher: Denial of Service vulnerability in PROFINET IO Device"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"PROFINET IO Device","version":{"version_data":[{"version_affected":"<","version_name":"V3","version_value":"V3.14.0.7"}]}}]},"vendor_name":"Hilscher"},{"product":{"product_data":[{"product_name":"PCV/PXV/PGV","version":{"version_data":[{"version_affected":"<=","version_name":"PGV100-F200A-B17-V1D, PGV150I-F200A-B17-V1D, PGV100-F200-B17-V1D-7477","version_value":"V2.0.0"},{"version_affected":"<=","version_name":"PXV100-F200-B17-V1D, PXV100-F200-B17-V1D-3636","version_value":"V4.2.0"},{"version_affected":"<=","version_name":"PCV80-F200-B17-V1D, PCV100-F200-B17-V1D, PCV50-F200-B17-V1D, PCV100-F200-B17-V1D-6011-6997","version_value":"V3.2.3"},{"version_affected":"<=","version_name":"PCV100-F200-B17-V1D-6011, PCV100-F200-B17-V1D-6011-8203","version_value":"V3.2.5"}]}},{"product_name":"PXV/PGV B28 Profisafe","version":{"version_data":[{"version_affected":"<=","version_name":"PXV100A-F200-B28-V1D, PXV100A-F200-B28-V1D-6011, PGV100A-F200-B28-V1D, PGV100A-F200A-B28-V1D","version_value":"V1.0.3"},{"version_affected":"<=","version_name":"PGV100AQ-F200A-B28-V1D, PGV100AQ-F200-B28-V1D, PXV100AQ-F200-B28-V1D, PXV100AQ-F200-B28-V1D-6011","version_value":"V2.1.1"}]}},{"product_name":"OHV","version":{"version_data":[{"version_affected":"<=","version_name":"OHV-F230-B17","version_value":"V1.1.0"}]}},{"product_name":"OIT","version":{"version_data":[{"version_affected":"<=","version_name":"OIT500-F113-B17-CB","version_value":"V1.3.4"}]}},{"product_name":"PHA","version":{"version_data":[{"version_affected":"<=","version_name":"PHA300-F200-B17-V1D, PHA400-F200-B17-V1D, PHA300-F200A-B17-V1D, PHA300-F200-B17-T-V1D, PHA200-F200A-B17-V1D, PHA200-F200-B17-V1D, PHA400-F200A-B17-V1D, PHA300-F200A-B17-T-V1D, PHA600-F200A-B17-V1D, PHA500-F200-B17-V1D, PHA500-F200A-B17-V1D, PHA600-F200-B17-V1D, PHA150-F200A-B17-V1D, PHA200-F200A-B17-T-V1D, PHA150-F200-B17-V1D, PHA800-F200-B17-V1D, PHA400-F200A-B17-T-V1D, PHA500-F200A-B17-T-V1D, PHA700-F200-B17-V1D","version_value":"V3.1.5"}]}},{"product_name":"WCS","version":{"version_data":[{"version_affected":"<=","version_name":"WCS3B-LS610, WCS3B-LS610H, WCS3B-LS610D, WCS3B-LS610DH, WCS3B-LS610H-OM, WCS3B-LS610DH-OM, WCS3B-LS610D-OM, CS3B-LS610-OM","version_value":"V3.0.0"}]}}]},"vendor_name":"Pepper+Fuchs"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-787 Out-of-bounds Write"}]}]},"references":{"reference_data":[{"name":"https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device","refsource":"CONFIRM","url":"https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device"},{"name":"https://cert.vde.com/en-us/advisories/vde-2021-006","refsource":"CONFIRM","url":"https://cert.vde.com/en-us/advisories/vde-2021-006"}]},"source":{"advisory":"vde-2021-006","defect":["vde-2021-006"],"discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2021-006","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T17:53:23.078Z"}}]}}}