Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2021-20988
PUBLISHED
More InfoOfficial Page
Assigner-CERTVDE
Assigner Org ID-270ccfa6-a436-4e77-922e-914ec3a9685c
View Known Exploited Vulnerability (KEV) details
Published At-13 May, 2021 | 13:45
Updated At-16 Sep, 2024 | 17:49
Rejected At-
▼CVE Numbering Authority (CNA)
Hilscher rcX RTOS: Wrong handling of the UDP checksum

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.

Affected Products
Vendor
Hilscher
Product
rcX RTOS
Versions
Affected
  • From unspecified before V2.1.14.1 (custom)
Vendor
Pepperl+Fuchs
Product
Ethernet IO Modules ICE1-16
Versions
Affected
  • From ICE1-16DI-G60L-V1D through F10017 (custom)
  • From ICE1-16DIO-G60L-C1-V1D through F10017 (custom)
  • From ICE1-16DIO-G60L-V1D through F10017 (custom)
Vendor
Pepperl+Fuchs
Product
Ethernet IO Modules ICE1-8
Versions
Affected
  • From ICE1-8DI8DO-G60L-C1-V1D through F10017 (custom)
  • From ICE1-8DI8DO-G60L-V1D through F10017 (custom)
  • From ICE1-8IOL-G30L-V1D through F10017 (custom)
  • From ICE1-8IOL-G60L-V1D through F10017 (custom)
  • From ICE1-8IOL-S2-G60L-V1D through F10017 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-119CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Type: CWE
CWE ID: CWE-119
Description: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Metrics
VersionBase scoreBase severityVector
3.18.6HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Version: 3.1
Base score: 8.6
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://kb.hilscher.com/display/ISMS/2019-04-10+Wrong+handling+of+the+UDP+checksum
x_refsource_CONFIRM
https://cert.vde.com/de-de/advisories/vde-2021-018
x_refsource_CONFIRM
Hyperlink: https://kb.hilscher.com/display/ISMS/2019-04-10+Wrong+handling+of+the+UDP+checksum
Resource:
x_refsource_CONFIRM
Hyperlink: https://cert.vde.com/de-de/advisories/vde-2021-018
Resource:
x_refsource_CONFIRM
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://kb.hilscher.com/display/ISMS/2019-04-10+Wrong+handling+of+the+UDP+checksum
x_refsource_CONFIRM
x_transferred
https://cert.vde.com/de-de/advisories/vde-2021-018
x_refsource_CONFIRM
x_transferred
Hyperlink: https://kb.hilscher.com/display/ISMS/2019-04-10+Wrong+handling+of+the+UDP+checksum
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://cert.vde.com/de-de/advisories/vde-2021-018
Resource:
x_refsource_CONFIRM
x_transferred
Details not found