CVEvulnerability

CVE-2021-27477

7.5 HIGH Published 2021-07-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-07-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-119, CWE-787

Description

When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop.

Affected configurations

• jtekt pc10g-cpu firmware (< 3.91) • jtekt 2port-efr firmware (< 1.50) • jtekt plus cpu firmware (< 3.11) • jtekt plus ex firmware (< 3.11) • jtekt plus ex2 firmware (< 3.11) • jtekt plus efr firmware (< 3.11) • jtekt plus efr2 firmware (< 3.11) • jtekt plus 2p-efr firmware (< 3.11) • jtekt pc10p-dp firmware (< 1.50) • jtekt pc10p-dp-io firmware (< 1.50) • jtekt plus bus-ex firmware (< 2.13) • jtekt nano 10gx firmware (< 3.00) • jtekt nano 2et firmware (< 2.40) • jtekt pc10pe firmware (< 1.02) • jtekt pc10pe-16\/16p firmware (< 1.02) • jtekt pc10e firmware (< 1.02) • jtekt fl\/et-t-v2h firmware (< f2.8 e1.5) • jtekt pc10b firmware (< 1.11) • jtekt pc10b-p firmware (< 1.11) • jtekt nano cpu firmware (< 2.08) • jtekt pc10p firmware (< 1.05) • jtekt pc10ge firmware (< 1.04)

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-787 Out-of-bounds Write weakness

References