Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2021-20987

Hilscher: EtherNet/IP stack crash for specific CIP service

Description

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hilscher EtherNet/IP Core V2

  • V2 to < V2.13.0.21affected

Pepper+Fuchs PCV/PXV/PGV

  • PXV100-F200-B25-V1D, PXV100I-F200-B25-V1D, PCV100-F200-B25-V1D-6011-6720, PCV50-F200-B25-V1D, PCV80-F200-B25-V1D, PCV100-F200-B25-V1D-6011 to ≤ V1.10.0affected

Pepper+Fuchs WCS

  • WCS3B-LS510, WCS3B-LS510H, WCS3B-LS510D, WCS3B-LS510DH, WCS3B-LS510H-OM, WCS3B-LS510DH-OM, WCS3B-LS510D-OM, WCS3B-LS510-OM to ≤ V1.2.1affected

References