VulnerabilityModified
CVE-2021-20986
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7.
HIGH 7.5EPSS 1.04%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.04%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 1.04% probability · 62th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- hilscher/profinet io device firmware · pepperl-fuchs/pgv100-f200a-b17-v1d firmware · pepperl-fuchs/pgv150i-f200a-b17-v1d firmware · pepperl-fuchs/pgv100-f200-b17-v1d-7477 firmware · pepperl-fuchs/pxv100-f200-b17-v1d firmware · pepperl-fuchs/pxv100-f200-b17-v1d-3636 firmware · pepperl-fuchs/pcv80-f200-b17-v1d firmware · pepperl-fuchs/pcv100-f200-b17-v1d firmware · pepperl-fuchs/pcv50-f200-b17-v1d firmware · pepperl-fuchs/pcv100-f200-b17-v1d-6011-6997 firmware · pepperl-fuchs/pcv100-f200-b17-v1d-6011 firmware · pepperl-fuchs/pcv100-f200-b17-v1d-6011-8203 firmware · pepperl-fuchs/pxv100a-f200-b28-v1d firmware · pepperl-fuchs/pxv100a-f200-b28-v1d-6011 firmware · pepperl-fuchs/pgv100a-f200-b28-v1d firmware · pepperl-fuchs/pgv100a-f200a-b28-v1d firmware · pepperl-fuchs/pgv100aq-f200a-b28-v1d firmware · pepperl-fuchs/pgv100aq-f200-b28-v1d firmware · pepperl-fuchs/pxv100aq-f200-b28-v1d firmware · pepperl-fuchs/pxv100aq-f200-b28-v1d-6011 firmware · +4 more
- Source
- info@cert.vde.com
References
- https://cert.vde.com/en-us/advisories/vde-2021-006Third Party Advisory
- https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+DeviceVendor Advisory
- https://cert.vde.com/en-us/advisories/vde-2021-006Third Party Advisory
- https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+DeviceVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.