CVE-2021-20988

Published: May 13, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.

Affected (9)

Products: Hilscher: Rcx Rtos · Pepperl Fuchs: Ice1 16di G60l V1d Firmware, Ice1 16dio G60l C1 V1d Firmware, Ice1 16dio G60l V1d Firmware, Ice1 8di8do G60l C1 V1d Firmware, Ice1 8di8do G60l V1d Firmware, Ice1 8iol G30l V1d Firmware, Ice1 8iol G60l V1d Firmware, Ice1 8iol S2 G60l V1d Firmware

Hilscher

1 product

Rcx Rtos

Pepperl Fuchs

8 products

Ice1 16di G60l V1d Firmware

Ice1 16dio G60l C1 V1d Firmware

Ice1 16dio G60l V1d Firmware

Ice1 8di8do G60l C1 V1d Firmware

Ice1 8di8do G60l V1d Firmware

Ice1 8iol G30l V1d Firmware

Ice1 8iol G60l V1d Firmware

Ice1 8iol S2 G60l V1d Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hilscher Rcx Rtos	Before 2.1.14.1

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Ice1 16di G60l V1d Firmware	Up to f10017

Running on/with	Platform Versions
Pepperl Fuchs Ice1 16di G60l V1d	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Ice1 16dio G60l C1 V1d Firmware	Up to f10017

Running on/with	Platform Versions
Pepperl Fuchs Ice1 16dio G60l C1 V1d	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Ice1 16dio G60l V1d Firmware	Up to f10017

Running on/with	Platform Versions
Pepperl Fuchs Ice1 16dio G60l V1d	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Ice1 8di8do G60l C1 V1d Firmware	Up to f10017

Running on/with	Platform Versions
Pepperl Fuchs Ice1 8di8do G60l C1 V1d	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Ice1 8di8do G60l V1d Firmware	Up to f10017

Running on/with	Platform Versions
Pepperl Fuchs Ice1 8di8do G60l V1d	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Ice1 8iol G30l V1d Firmware	Up to f10017

Running on/with	Platform Versions
Pepperl Fuchs Ice1 8iol G30l V1d	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Ice1 8iol G60l V1d Firmware	Up to f10017

Running on/with	Platform Versions
Pepperl Fuchs Ice1 8iol G60l V1d	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pepperl Fuchs Ice1 8iol S2 G60l V1d Firmware	Up to f10017

Running on/with	Platform Versions
Pepperl Fuchs Ice1 8iol S2 G60l V1d	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

https://cert.vde.com/de-de/advisories/vde-2021-018

Source: info@cert.vde.com

Third Party Advisory

https://kb.hilscher.com/display/ISMS/2019-04-10+Wrong+handling+of+the+UDP+checksum

Source: info@cert.vde.com

Vendor Advisory

https://cert.vde.com/de-de/advisories/vde-2021-018

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://kb.hilscher.com/display/ISMS/2019-04-10+Wrong+handling+of+the+UDP+checksum

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.