CVE-2021-20986
Hilscher: Denial of Service vulnerability in PROFINET IO Device
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in V3.14.0.7
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
Timeline
- CVE published
- Record last updated
Affected versions
- Hilscher PROFINET IO Device
From V3 · fixed in V3.14.0.7
- Pepper+Fuchs PCV/PXV/PGV
through V2.0.0; through V4.2.0; through V3.2.3; through V3.2.5
- Pepper+Fuchs PXV/PGV B28 Profisafe
through V1.0.3; through V2.1.1
- Pepper+Fuchs OHV
From OHV-F230-B17 · through V1.1.0
- Pepper+Fuchs OIT
From OIT500-F113-B17-CB · through V1.3.4
- Pepper+Fuchs PHA
through V3.1.5
- Pepper+Fuchs WCS
through V3.0.0