Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2021-20988

Hilscher rcX RTOS: Wrong handling of the UDP checksum

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hilscher rcX RTOS

  • unspecified to < V2.1.14.1affected

Pepperl+Fuchs Ethernet IO Modules ICE1-16

  • ICE1-16DI-G60L-V1D to ≤ F10017affected
  • ICE1-16DIO-G60L-C1-V1D to ≤ F10017affected
  • ICE1-16DIO-G60L-V1D to ≤ F10017affected

Pepperl+Fuchs Ethernet IO Modules ICE1-8

  • ICE1-8DI8DO-G60L-C1-V1D to ≤ F10017affected
  • ICE1-8DI8DO-G60L-V1D to ≤ F10017affected
  • ICE1-8IOL-G30L-V1D to ≤ F10017affected
  • ICE1-8IOL-G60L-V1D to ≤ F10017affected
  • ICE1-8IOL-S2-G60L-V1D to ≤ F10017affected

References