CVE-2021-20988
Hilscher rcX RTOS: Wrong handling of the UDP checksum
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in V2.1.14.1
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.
Timeline
- CVE published
- Record last updated
Affected versions
- Hilscher rcX RTOS
fixed in V2.1.14.1
- Pepperl+Fuchs Ethernet IO Modules ICE1-16
From ICE1-16DI-G60L-V1D · through F10017; From ICE1-16DIO-G60L-C1-V1D · through F10017; From ICE1-16DIO-G60L-V1D · through F10017
- Pepperl+Fuchs Ethernet IO Modules ICE1-8
From ICE1-8DI8DO-G60L-C1-V1D · through F10017; From ICE1-8DI8DO-G60L-V1D · through F10017; From ICE1-8IOL-G30L-V1D · through F10017; From ICE1-8IOL-G60L-V1D · through F10017; From ICE1-8IOL-S2-G60L-V1D · through F10017