CVE-2021-20987

Published: Feb 16, 2021Modified: Jun 17, 2026

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 4.0

Source: NVD

Description

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.

Affected (8)

Products: Hilscher: Ethernet/ip Adapter Firmware · Pepperl Fuchs: Wcs Firmware, Pxv100 F200 B25 V1d Firmware, Pxv100i F200 B25 V1d Firmware, Pcv100 F200 B25 V1d 6011 6720 Firmware, Pcv50 F200 B25 V1d Firmware, Pcv80 F200 B25 V1d Firmware, Pcv100 F200 B25 V1d 6011 Firmware

Hilscher

1 product

Ethernet/ip Adapter Firmware

Pepperl Fuchs

7 products

Wcs Firmware

Pxv100 F200 B25 V1d Firmware

Pxv100i F200 B25 V1d Firmware

Pcv100 F200 B25 V1d 6011 6720 Firmware

Pcv50 F200 B25 V1d Firmware

Pcv80 F200 B25 V1d Firmware

Pcv100 F200 B25 V1d 6011 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hilscher Ethernet/ip Adapter Firmware	From 2.0 to 2.13.0.21

Running on/with	Platform Versions
Hilscher Ethernet/ip Adapter	All versions

Configuration B

1 vulnerable · 8 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Wcs Firmware	Up to 1.2.1

Running on/with	Platform Versions
Pepperl Fuchs Wcs3b Ls510	All versions
Pepperl Fuchs Wcs3b Ls510 Om	All versions
Pepperl Fuchs Wcs3b Ls510d	All versions
Pepperl Fuchs Wcs3b Ls510d Om	All versions
Pepperl Fuchs Wcs3b Ls510dh	All versions
Pepperl Fuchs Wcs3b Ls510dh Om	All versions
Pepperl Fuchs Wcs3b Ls510h	All versions
Pepperl Fuchs Wcs3b Ls510h Om	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Pxv100 F200 B25 V1d Firmware	Up to 1.10.0

Running on/with	Platform Versions
Pepperl Fuchs Pxv100 F200 B25 V1d	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Pxv100i F200 B25 V1d Firmware	Up to 1.10.0

Running on/with	Platform Versions
Pepperl Fuchs Pxv100i F200 B25 V1d	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Pcv100 F200 B25 V1d 6011 6720 Firmware	Up to 1.10.0

Running on/with	Platform Versions
Pepperl Fuchs Pcv100 F200 B25 V1d 6011 6720	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Pcv50 F200 B25 V1d Firmware	Up to 1.10.0

Running on/with	Platform Versions
Pepperl Fuchs Pcv50 F200 B25 V1d	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Pcv80 F200 B25 V1d Firmware	Up to 1.10.0

Running on/with	Platform Versions
Pepperl Fuchs Pcv80 F200 B25 V1d	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Pcv100 F200 B25 V1d 6011 Firmware	Up to 1.10.0

Running on/with	Platform Versions
Pepperl Fuchs Pcv100 F200 B25 V1d 6011	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

https://cert.vde.com/en-us/advisories/vde-2021-007

Source: info@cert.vde.com

Third Party Advisory

https://kb.hilscher.com/pages/viewpage.action?pageId=108969480

Source: info@cert.vde.com

Vendor Advisory

https://cert.vde.com/en-us/advisories/vde-2021-007

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://kb.hilscher.com/pages/viewpage.action?pageId=108969480

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.