Lucene search

[email protected]NVD:CVE-2021-27477

HistoryJul 01, 2021 - 1:15 p.m.

CVE-2021-27477

2021-07-0113:15:08

CWE-119

CWE-787

[email protected]

web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

41.5%

JSON

When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop.

Affected configurations

NVD

Node

jtektpc10g-cpu_firmwareRange<3.91

AND

jtektpc10g-cpuMatch-

Node

jtekt2port-efr_firmwareRange<1.50

AND

jtekt2port-efrMatch-

Node

jtektplus_cpu_firmwareRange<3.11

AND

jtektplus_cpuMatch-

Node

jtektplus_ex_firmwareRange<3.11

AND

jtektplus_exMatch-

Node

jtektplus_ex2_firmwareRange<3.11

AND

jtektplus_ex2Match-

Node

jtektplus_efr_firmwareRange<3.11

AND

jtektplus_efrMatch-

Node

jtektplus_efr2_firmwareRange<3.11

AND

jtektplus_efr2Match-

Node

jtektplus_2p-efr_firmwareRange<3.11

AND

jtektplus_2p-efrMatch-

Node

jtektpc10p-dp_firmwareRange<1.50

AND

jtektpc10p-dpMatch-

Node

jtektpc10p-dp-io_firmwareRange<1.50

AND

jtektpc10p-dp-ioMatch-

Node

jtektplus_bus-ex_firmwareRange<2.13

AND

jtektplus_bus-exMatch-

Node

jtektnano_10gx_firmwareRange<3.00

AND

jtektnano_10gxMatch-

Node

jtektnano_2et_firmwareRange<2.40

AND

jtektnano_2etMatch-

Node

jtektpc10pe_firmwareRange<1.02

AND

jtektpc10peMatch-

Node

jtektpc10pe-16\/16p_firmwareRange<1.02

AND

jtektpc10pe-16\/16pMatch-

Node

jtektpc10e_firmwareRange<1.02

AND

jtektpc10eMatch-

Node

jtektfl\/et-t-v2h_firmwareRange<f2.8_e1.5

AND

jtektfl\/et-t-v2hMatch-

Node

jtektpc10b_firmwareRange<1.11

AND

jtektpc10bMatch-

Node

jtektpc10b-p_firmwareRange<1.11

AND

jtektpc10b-pMatch-

Node

jtektnano_cpu_firmwareRange<2.08

AND

jtektnano_cpuMatch-

Node

jtektpc10p_firmwareRange<1.05

AND

jtektpc10pMatch-

Node

jtektpc10ge_firmwareRange<1.04

AND

jtektpc10geMatch-

References

us-cert.cisa.gov/ics/advisories/icsa-21-180-04

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

41.5%

JSON

Related for NVD:CVE-2021-27477

prion1 cve1 cvelist1 ics1