CVEvulnerability
CVE-2021-20986
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-02-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-787
Description
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
Affected configurations
• hilscher profinet io device firmware (>= 3.0 < 3.14.0.7)
• pepperl-fuchs pgv100-f200a-b17-v1d firmware (<= 2.0.0)
• pepperl-fuchs pgv150i-f200a-b17-v1d firmware (<= 2.0.0)
• pepperl-fuchs pgv100-f200-b17-v1d-7477 firmware (<= 2.0.0)
• pepperl-fuchs pxv100-f200-b17-v1d firmware (<= 4.2.0)
• pepperl-fuchs pxv100-f200-b17-v1d-3636 firmware (<= 4.2.0)
• pepperl-fuchs pcv80-f200-b17-v1d firmware (<= 3.2.3)
• pepperl-fuchs pcv100-f200-b17-v1d firmware (<= 3.2.3)
• pepperl-fuchs pcv50-f200-b17-v1d firmware (<= 3.2.3)
• pepperl-fuchs pcv100-f200-b17-v1d-6011-6997 firmware (<= 3.2.3)
• pepperl-fuchs pcv100-f200-b17-v1d-6011 firmware (<= 3.2.5)
• pepperl-fuchs pcv100-f200-b17-v1d-6011-8203 firmware (<= 3.2.5)
• pepperl-fuchs pxv100a-f200-b28-v1d firmware (<= 1.0.3)
• pepperl-fuchs pxv100a-f200-b28-v1d-6011 firmware (<= 1.0.3)
• pepperl-fuchs pgv100a-f200-b28-v1d firmware (<= 1.0.3)
• pepperl-fuchs pgv100a-f200a-b28-v1d firmware (<= 1.0.3)
• pepperl-fuchs pgv100aq-f200a-b28-v1d firmware (<= 2.1.1)
• pepperl-fuchs pgv100aq-f200-b28-v1d firmware (<= 2.1.1)
• pepperl-fuchs pxv100aq-f200-b28-v1d firmware (<= 2.1.1)
• pepperl-fuchs pxv100aq-f200-b28-v1d-6011 firmware (<= 2.1.1)
• pepperl-fuchs ohv-f230-b17 firmware (<= 1.1.0)
• pepperl-fuchs oit500-f113b17-cb firmware (<= 1.3.4)
• pepperl-fuchs pha firmware (<= 3.1.5)
• pepperl-fuchs wcs firmware (<= 3.0.0)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://cert.vde.com/en-us/advisories/vde-2021-006 Third Party Advisory
- https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device Vendor Advisory
- https://cert.vde.com/en-us/advisories/vde-2021-006 Third Party Advisory
- https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device Vendor Advisory