CVEvulnerability
CVE-2021-27458
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-04-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-404
Description
If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All versions, PC10B-P TCC-6373: All versions, PC10B TCC-1021: All versions, PC10B-E/C TCU-6521: All versions, PC10E TCC-4737: All versions; TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions, Plus EX TCU-6741: All versions, Plus EX2 TCU-6858: All versions, Plus EFR TCU-6743: All versions, Plus EFR2 TCU-6859: All versions, Plus 2P-EFR TCU-6929: All versions, Plus BUS-EX TCU-6900: All versions; TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions, 2PORT-EFR THU-6404: All versions) are left in an open state by an attacker, Ethernet communications cannot be established with other devices, depending on the settings of the link parameters.
Affected configurations
• jtekt pc10g-cpu tcc-6353 firmware
• jtekt pc10ge tcc-6464 firmware
• jtekt pc10p tcc-6372 firmware
• jtekt pc10p-dp tcc-6726 firmware
• jtekt pc10p-dp-io tcc-6752 firmware
• jtekt pc10b-p tcc-6373 firmware
• jtekt pc10b tcc-1021 firmware
• jtekt pc10b-e\/c tcu-6521 firmware
• jtekt pc10e tcc-4737 firmware
• jtekt plus cpu tcc-6740 firmware
• jtekt plus ex tcu-6741 firmware
• jtekt plus ex2 tcu-6858 firmware
• jtekt plus efr tcu-6743 firmware
• jtekt plus efr2 tcu-6859 firmware
• jtekt plus 2p-efr tcu-6929 firmware
• jtekt plus bus-ex tcu-6900 firmware
• jtekt fl\/et-t-v2h thu-6289 firmware
• jtekt 2port-efr thu-6404 firmware
Related
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-103-03 Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-21-103-03 Third Party Advisory, US Government Resource