CVE-2021-20986
Assigner: CERTVDE
Published: 2021-02-15T00:00:00
State: PUBLISHED
affected: product: PROFINET IO Device
vendor: Hilscher
versions: lessThan: V3.14.0.7
status: affected
version: V3
versionType: custom
product: PCV/PXV/PGV
vendor: Pepper+Fuchs
versions: lessThanOrEqual: V2.0.0
status: affected
version: PGV100-F200A-B17-V1D, PGV150I-F200A-B17-V1D, PGV100-F200-B17-V1D-7477
versionType: custom
lessThanOrEqual: V4.2.0
status: affected
version: PXV100-F200-B17-V1D, PXV100-F200-B17-V1D-3636
versionType: custom
lessThanOrEqual: V3.2.3
status: affected
version: PCV80-F200-B17-V1D, PCV100-F200-B17-V1D, PCV50-F200-B17-V1D, PCV100-F200-B17-V1D-6011-6997
versionType: custom
lessThanOrEqual: V3.2.5
status: affected
version: PCV100-F200-B17-V1D-6011, PCV100-F200-B17-V1D-6011-8203
versionType: custom
product: PXV/PGV B28 Profisafe
vendor: Pepper+Fuchs
versions: lessThanOrEqual: V1.0.3
status: affected
version: PXV100A-F200-B28-V1D, PXV100A-F200-B28-V1D-6011, PGV100A-F200-B28-V1D, PGV100A-F200A-B28-V1D
versionType: custom
lessThanOrEqual: V2.1.1
status: affected
version: PGV100AQ-F200A-B28-V1D, PGV100AQ-F200-B28-V1D, PXV100AQ-F200-B28-V1D, PXV100AQ-F200-B28-V1D-6011
versionType: custom
product: OHV
vendor: Pepper+Fuchs
versions: lessThanOrEqual: V1.1.0
status: affected
version: OHV-F230-B17
versionType: custom
product: OIT
vendor: Pepper+Fuchs
versions: lessThanOrEqual: V1.3.4
status: affected
version: OIT500-F113-B17-CB
versionType: custom
product: PHA
vendor: Pepper+Fuchs
versions: lessThanOrEqual: V3.1.5
status: affected
version: PHA300-F200-B17-V1D, PHA400-F200-B17-V1D, PHA300-F200A-B17-V1D, PHA300-F200-B17-T-V1D, PHA200-F200A-B17-V1D, PHA200-F200-B17-V1D, PHA400-F200A-B17-V1D, PHA300-F200A-B17-T-V1D, PHA600-F200A-B17-V1D, PHA500-F200-B17-V1D, PHA500-F200A-B17-V1D, PHA600-F200-B17-V1D, PHA150-F200A-B17-V1D, PHA200-F200A-B17-T-V1D, PHA150-F200-B17-V1D, PHA800-F200-B17-V1D, PHA400-F200A-B17-T-V1D, PHA500-F200A-B17-T-V1D, PHA700-F200-B17-V1D
versionType: custom
product: WCS
vendor: Pepper+Fuchs
versions: lessThanOrEqual: V3.0.0
status: affected
version: WCS3B-LS610, WCS3B-LS610H, WCS3B-LS610D, WCS3B-LS610DH, WCS3B-LS610H-OM, WCS3B-LS610DH-OM, WCS3B-LS610D-OM, CS3B-LS610-OM
versionType: custom
datePublic: 2021-02-15T00:00:00
descriptions: value: A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-787
description: CWE-787 Out-of-bounds Write
type: CWE
source: advisory: vde-2021-006
defect: vde-2021-006
discovery: UNKNOWN
title: Hilscher: Denial of Service vulnerability in PROFINET IO Device
x_generator: engine: Vulnogram 0.0.9