Hilscher: EtherNet/IP stack crash for specific CIP service

8.6 CVSS

Vulnerability Description

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-20987

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Hilscher

View All →

CVE-2021-20988

Hilscher rcX RTOS: Wrong handling of the UDP checksum

High 8.6

CVE-2021-20986

Hilscher: Denial of Service vulnerability in PROFINET IO Device

High 7.5

Affected Vendor

Hilscher

View all reports →

Affected Software

EtherNet/IP Core V2, PCV/PXV/PGV, WCS

Vulnerable Versions:

V2, PXV100-F200-B25-V1D, PXV100I-F200-B25-V1D, PCV100-F200-B25-V1D-6011-6720, PCV50-F200-B25-V1D, PCV80-F200-B25-V1D, PCV100-F200-B25-V1D-6011, WCS3B-LS510, WCS3B-LS510H, WCS3B-LS510D, WCS3B-LS510DH, WCS3B-LS510H-OM, WCS3B-LS510DH-OM, WCS3B-LS510D-OM, WCS3B-LS510-OM