CVE-2021-20988

🗓️ 13 May 2021 13:45:24Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 40 Views

Hilscher rcX RTOS version prior to V2.1.14.1 allows denial of service via unverified UDP packet length

Reporter	Title	Published	Views	Family All 6
CNNVD	Hilscher rcX RTOS 缓冲区错误漏洞	13 May 202100:00	–	cnnvd
Cvelist	CVE-2021-20988 Hilscher rcX RTOS: Wrong handling of the UDP checksum	13 May 202113:45	–	cvelist
EUVD	EUVD-2021-8397	3 Oct 202520:07	–	euvd
NVD	CVE-2021-20988	13 May 202114:15	–	nvd
OSV	CVE-2021-20988	13 May 202114:15	–	osv
Prion	Code injection	13 May 202114:15	–	prion

NVD

Vulners

Node

hilscher rcx_rtosRange<2.1.14.1

Node

pepperl-fuchs ice1-16di-g60l-v1d_firmwareRange≤f10017

AND

pepperl-fuchs ice1-16di-g60l-v1dMatch-

Node

pepperl-fuchs ice1-16dio-g60l-c1-v1d_firmwareRange≤f10017

AND

pepperl-fuchs ice1-16dio-g60l-c1-v1dMatch-

Node

pepperl-fuchs ice1-16dio-g60l-v1d_firmwareRange≤f10017

AND

pepperl-fuchs ice1-16dio-g60l-v1dMatch-

Node

pepperl-fuchs ice1-8di8do-g60l-c1-v1d_firmwareRange≤f10017

AND

pepperl-fuchs ice1-8di8do-g60l-c1-v1dMatch-

Node

pepperl-fuchs ice1-8di8do-g60l-v1d_firmwareRange≤f10017

AND

pepperl-fuchs ice1-8di8do-g60l-v1dMatch-

Node

pepperl-fuchs ice1-8iol-g30l-v1d_firmwareRange≤f10017

AND

pepperl-fuchs ice1-8iol-g30l-v1dMatch-

Node

pepperl-fuchs ice1-8iol-g60l-v1d_firmwareRange≤f10017

AND

pepperl-fuchs ice1-8iol-g60l-v1dMatch-

Node

pepperl-fuchs ice1-8iol-s2-g60l-v1d_firmwareRange≤f10017

AND

pepperl-fuchs ice1-8iol-s2-g60l-v1dMatch-

[
  {
    "product": "rcX RTOS",
    "vendor": "Hilscher",
    "versions": [
      {
        "lessThan": "V2.1.14.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Ethernet IO Modules ICE1-16",
    "vendor": "Pepperl+Fuchs",
    "versions": [
      {
        "lessThanOrEqual": "F10017",
        "status": "affected",
        "version": "ICE1-16DI-G60L-V1D",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "F10017",
        "status": "affected",
        "version": "ICE1-16DIO-G60L-C1-V1D",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "F10017",
        "status": "affected",
        "version": "ICE1-16DIO-G60L-V1D",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Ethernet IO Modules ICE1-8",
    "vendor": "Pepperl+Fuchs",
    "versions": [
      {
        "lessThanOrEqual": "F10017",
        "status": "affected",
        "version": "ICE1-8DI8DO-G60L-C1-V1D",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "F10017",
        "status": "affected",
        "version": "ICE1-8DI8DO-G60L-V1D",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "F10017",
        "status": "affected",
        "version": "ICE1-8IOL-G30L-V1D",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "F10017",
        "status": "affected",
        "version": "ICE1-8IOL-G60L-V1D",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "F10017",
        "status": "affected",
        "version": "ICE1-8IOL-S2-G60L-V1D",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.hilscher.com/display/ISMS/2019-04-10+Wrong+handling+of+the+UDP+checksum
cert	www.cert.vde.com/de-de/advisories/vde-2021-018

21 Nov 2024 05:47Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5 - 8.6

EPSS0.00277

CWE-119