Buffer overflow in JTEKT Corporation products - CVE-2021-27477

Vulnerability identifier: #VU54460

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-27477

CWE-ID: CWE-119

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error. A remote attacker on the local network can trigger memory corruption and cause a denial of service condition on the target system.

TOYOPUC PLC Plus CPU
TOYOPUC PLC Plus EX
TOYOPUC PLC Plus EX2
TOYOPUC PLC Plus EFR
TOYOPUC PLC Plus EFR2
TOYOPUC PLC Plus 2P-EFR
TOYOPUC PLC Plus BUS-EX
TOYOPUC PLC PC10E
TOYOPUC PLC FL/ET-T-V2H
TOYOPUC PLC PC10B
TOYOPUC PLC PC10B-P
TOYOPUC PLC Nano CPU
TOYOPUC PLC PC10P
TOYOPUC PLC PC10GE
TOYOPUC PLC PC10PE-16/16P
TOYOPUC PLC PC10PE
TOYOPUC PLC 2PORT-EFR
TOYOPUC PLC PC10P-DP-IO
TOYOPUC PLC PC10P-DP
TOYOPUC PLC Nano 2ET
TOYOPUC PLC Nano 10GX
TOYOPUC PLC PC10G-CPU

Install updates from vendor's website.

TOYOPUC PLC Plus CPU - update to 3.11
TOYOPUC PLC Plus EX - update to 3.11
TOYOPUC PLC Plus EX2 - update to 3.11
TOYOPUC PLC Plus EFR - update to 3.11
TOYOPUC PLC Plus EFR2 - update to 3.11
TOYOPUC PLC Plus 2P-EFR - update to 3.11
TOYOPUC PLC Plus BUS-EX - update to 2.13
TOYOPUC PLC PC10E - update to 1.12
TOYOPUC PLC FL/ET-T-V2H - addressed in versions E1.5, F2.8
TOYOPUC PLC PC10B - update to 1.11
TOYOPUC PLC PC10B-P - update to 1.11
TOYOPUC PLC Nano CPU - update to 2.08
TOYOPUC PLC PC10P - update to 1.05
TOYOPUC PLC PC10GE - update to 1.04
TOYOPUC PLC PC10PE-16/16P - update to 1.02
TOYOPUC PLC PC10PE - update to 1.02
TOYOPUC PLC 2PORT-EFR - update to 1.50
TOYOPUC PLC PC10P-DP-IO - update to 1.50
TOYOPUC PLC PC10P-DP - update to 1.50
TOYOPUC PLC Nano 2ET - update to 2.40
TOYOPUC PLC Nano 10GX - update to 3.00
TOYOPUC PLC PC10G-CPU - update to 3.91

• https://ics-cert.us-cert.gov/advisories/icsa-21-180-04

• Denial of service in JTEKT TOYOPUC PLC products