{"id": "CVE-2021-27477", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2021-07-01T13:15:08.003", "references": [{"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-119"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop."}, {"lang": "es", "value": "Cuando JTEKT Corporation TOYOPUC PLC versiones PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P y PC10GE reciben una trama no v\u00e1lida, el \u00e1rea exterior de un b\u00fafer de recepci\u00f3n para FL-net se sobrescribe. Como resultado, la CPU del PLC detecta un error del sistema y los productos afectados se detienen"}], "lastModified": "2024-11-21T05:58:04.313", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10g-cpu_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22D9DDA3-97E5-4126-A25C-B97CC4E0ECB1", "versionEndExcluding": "3.91"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10g-cpu:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BC86B853-5B5B-4289-9A44-5CE055B043EE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:2port-efr_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C664399E-1234-4B87-A95F-3D3EED021E7E", "versionEndExcluding": "1.50"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:2port-efr:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3A13F82D-1759-4599-A976-185A13624362"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_cpu_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5D1D75E-5D41-4B0E-AF16-6A23E012185F", "versionEndExcluding": "3.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_cpu:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9D9F88F4-3DBA-4BCB-B335-792ACD46C41D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_ex_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F60432C2-5D24-4A00-BF0B-1E658DD7E10C", "versionEndExcluding": "3.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_ex:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CBBBFB02-98BA-49AA-89EC-5A2A601425F8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_ex2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90926718-2F18-40AB-8DB5-8D15D66D8396", "versionEndExcluding": "3.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_ex2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BA38A495-AF65-4819-BEBC-F23A4B8FFA0F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_efr_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD733D20-E696-4713-9509-AEED02753EF0", "versionEndExcluding": "3.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_efr:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "466211B5-2205-4C37-ABBC-0C0E089D8C27"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_efr2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EC7E293-6A02-405D-8D0F-9D28220463E1", "versionEndExcluding": "3.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_efr2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7AC3C38F-361E-4FF9-B7DE-06B559501DA7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_2p-efr_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4791655-E74A-4095-8D8F-2C2B4503CC12", "versionEndExcluding": "3.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_2p-efr:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "46EBD44A-2598-4E62-8A55-A752A64EDE98"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10p-dp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE4A9827-4275-4272-9296-FFF0D9E384D4", "versionEndExcluding": "1.50"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10p-dp:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D0B3FDE8-3035-4C51-A182-E51644C7F5F1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10p-dp-io_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "207AF20B-B162-4CD9-8232-889E678143FB", "versionEndExcluding": "1.50"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10p-dp-io:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C7D9B4E8-78A6-437C-8F8C-8D79675BE5CB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_bus-ex_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3811E760-B0AD-40A0-BB1A-B62F9EE428CD", "versionEndExcluding": "2.13"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_bus-ex:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B9A82BE9-F39A-47A7-9520-77AAFAA7B32A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:nano_10gx_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5A4C13D-C002-4333-8C77-F081036F76B3", "versionEndExcluding": "3.00"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:nano_10gx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "00855C73-B9ED-4FA3-BDCC-48AD3FC48FF9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:nano_2et_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60E21DE9-8377-4B68-AF43-B4B34F966D99", "versionEndExcluding": "2.40"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:nano_2et:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "36DC1328-A8C0-4BEC-A645-542F509537F6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10pe_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6233EC3-DCB8-4791-B8F1-1F5A4CE21A41", "versionEndExcluding": "1.02"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10pe:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "100ACE3B-F022-4123-8961-EB347C42D028"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10pe-16\\/16p_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "991DF456-2F99-4C1C-857B-2F2EFF4683C1", "versionEndExcluding": "1.02"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10pe-16\\/16p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F3CDA45F-6A2A-4BDF-9F0D-24EE765C6591"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10e_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1982B0CF-4BBB-494F-8A54-1970BC418022", "versionEndExcluding": "1.02"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A3FC9555-212D-45FE-94E4-9856A6AC91D2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:fl\\/et-t-v2h_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "223BE690-BD32-48AE-8225-7EA45197136C", "versionEndExcluding": "f2.8_e1.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:fl\\/et-t-v2h:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C1C90F4A-1BB8-4E8F-B5E1-B3EA43D0FBE7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10b_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C254E232-8DD3-482F-8562-892A0571B084", "versionEndExcluding": "1.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10b:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D4D57AED-D31C-4105-99D8-06742DF7A75C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10b-p_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2087D15B-0258-45E8-804A-0FD55290BBE3", "versionEndExcluding": "1.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10b-p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1B8703AC-8F8E-42B9-AAB3-D4F47B46190E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:nano_cpu_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5EA675C-9EEF-4CA6-9D06-EF4E20FBD4D5", "versionEndExcluding": "2.08"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:nano_cpu:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "98E70744-495C-425D-A8A4-6C421B3253EE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10p_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5DD46C4-4756-4965-A293-174F766B409F", "versionEndExcluding": "1.05"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "322AD962-FAF4-4AEE-BFC0-275AEF6F4C67"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10ge_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F2ADB5C-A29F-42F9-81D8-64B4448C996A", "versionEndExcluding": "1.04"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10ge:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "54CA6C5D-D9CB-4E27-AA6B-0276A7499315"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}