2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2021-27477" ,
"sourceIdentifier" : "ics-cert@hq.dhs.gov" ,
"published" : "2021-07-01T13:15:08.003" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T05:58:04.313" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop."
} ,
{
"lang" : "es" ,
"value" : "Cuando JTEKT Corporation TOYOPUC PLC versiones PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P y PC10GE reciben una trama no v\u00e1lida, el \u00e1rea exterior de un b\u00fafer de recepci\u00f3n para FL-net se sobrescribe. Como resultado, la CPU del PLC detecta un error del sistema y los productos afectados se detienen"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.8 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "COMPLETE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 6.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
2024-12-08 03:06:42 +00:00
"source" : "ics-cert@hq.dhs.gov" ,
"type" : "Secondary" ,
2023-04-24 12:24:31 +02:00
"description" : [
{
"lang" : "en" ,
2024-12-08 03:06:42 +00:00
"value" : "CWE-119"
2023-04-24 12:24:31 +02:00
}
]
} ,
{
2024-12-08 03:06:42 +00:00
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
2023-04-24 12:24:31 +02:00
"description" : [
{
"lang" : "en" ,
2024-12-08 03:06:42 +00:00
"value" : "CWE-787"
2023-04-24 12:24:31 +02:00
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:pc10g-cpu_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.91" ,
"matchCriteriaId" : "22D9DDA3-97E5-4126-A25C-B97CC4E0ECB1"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:pc10g-cpu:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BC86B853-5B5B-4289-9A44-5CE055B043EE"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:2port-efr_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.50" ,
"matchCriteriaId" : "C664399E-1234-4B87-A95F-3D3EED021E7E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:2port-efr:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3A13F82D-1759-4599-A976-185A13624362"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:plus_cpu_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.11" ,
"matchCriteriaId" : "A5D1D75E-5D41-4B0E-AF16-6A23E012185F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:plus_cpu:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9D9F88F4-3DBA-4BCB-B335-792ACD46C41D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:plus_ex_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.11" ,
"matchCriteriaId" : "F60432C2-5D24-4A00-BF0B-1E658DD7E10C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:plus_ex:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CBBBFB02-98BA-49AA-89EC-5A2A601425F8"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:plus_ex2_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.11" ,
"matchCriteriaId" : "90926718-2F18-40AB-8DB5-8D15D66D8396"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:plus_ex2:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BA38A495-AF65-4819-BEBC-F23A4B8FFA0F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:plus_efr_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.11" ,
"matchCriteriaId" : "FD733D20-E696-4713-9509-AEED02753EF0"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:plus_efr:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "466211B5-2205-4C37-ABBC-0C0E089D8C27"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:plus_efr2_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.11" ,
"matchCriteriaId" : "3EC7E293-6A02-405D-8D0F-9D28220463E1"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:plus_efr2:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7AC3C38F-361E-4FF9-B7DE-06B559501DA7"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:plus_2p-efr_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.11" ,
"matchCriteriaId" : "E4791655-E74A-4095-8D8F-2C2B4503CC12"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:plus_2p-efr:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "46EBD44A-2598-4E62-8A55-A752A64EDE98"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:pc10p-dp_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.50" ,
"matchCriteriaId" : "EE4A9827-4275-4272-9296-FFF0D9E384D4"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:pc10p-dp:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D0B3FDE8-3035-4C51-A182-E51644C7F5F1"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:pc10p-dp-io_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.50" ,
"matchCriteriaId" : "207AF20B-B162-4CD9-8232-889E678143FB"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:pc10p-dp-io:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C7D9B4E8-78A6-437C-8F8C-8D79675BE5CB"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:plus_bus-ex_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.13" ,
"matchCriteriaId" : "3811E760-B0AD-40A0-BB1A-B62F9EE428CD"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:plus_bus-ex:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B9A82BE9-F39A-47A7-9520-77AAFAA7B32A"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:nano_10gx_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "3.00" ,
"matchCriteriaId" : "E5A4C13D-C002-4333-8C77-F081036F76B3"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:nano_10gx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "00855C73-B9ED-4FA3-BDCC-48AD3FC48FF9"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:nano_2et_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.40" ,
"matchCriteriaId" : "60E21DE9-8377-4B68-AF43-B4B34F966D99"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:nano_2et:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "36DC1328-A8C0-4BEC-A645-542F509537F6"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:pc10pe_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.02" ,
"matchCriteriaId" : "B6233EC3-DCB8-4791-B8F1-1F5A4CE21A41"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:pc10pe:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "100ACE3B-F022-4123-8961-EB347C42D028"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:pc10pe-16\\/16p_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.02" ,
"matchCriteriaId" : "991DF456-2F99-4C1C-857B-2F2EFF4683C1"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:pc10pe-16\\/16p:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F3CDA45F-6A2A-4BDF-9F0D-24EE765C6591"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:pc10e_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.02" ,
"matchCriteriaId" : "1982B0CF-4BBB-494F-8A54-1970BC418022"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:pc10e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A3FC9555-212D-45FE-94E4-9856A6AC91D2"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:fl\\/et-t-v2h_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "f2.8_e1.5" ,
"matchCriteriaId" : "223BE690-BD32-48AE-8225-7EA45197136C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:fl\\/et-t-v2h:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C1C90F4A-1BB8-4E8F-B5E1-B3EA43D0FBE7"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:pc10b_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.11" ,
"matchCriteriaId" : "C254E232-8DD3-482F-8562-892A0571B084"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:pc10b:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D4D57AED-D31C-4105-99D8-06742DF7A75C"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:pc10b-p_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.11" ,
"matchCriteriaId" : "2087D15B-0258-45E8-804A-0FD55290BBE3"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:pc10b-p:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1B8703AC-8F8E-42B9-AAB3-D4F47B46190E"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:nano_cpu_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.08" ,
"matchCriteriaId" : "B5EA675C-9EEF-4CA6-9D06-EF4E20FBD4D5"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:nano_cpu:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "98E70744-495C-425D-A8A4-6C421B3253EE"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:pc10p_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.05" ,
"matchCriteriaId" : "A5DD46C4-4756-4965-A293-174F766B409F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:pc10p:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "322AD962-FAF4-4AEE-BFC0-275AEF6F4C67"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:jtekt:pc10ge_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "1.04" ,
"matchCriteriaId" : "0F2ADB5C-A29F-42F9-81D8-64B4448C996A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:jtekt:pc10ge:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "54CA6C5D-D9CB-4E27-AA6B-0276A7499315"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04" ,
"source" : "ics-cert@hq.dhs.gov" ,
"tags" : [
"Third Party Advisory" ,
"US Government Resource"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory" ,
"US Government Resource"
]
2023-04-24 12:24:31 +02:00
}
]
}