CVE-2021-27458
If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.10%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All versions, PC10B-P TCC-6373: All versions, PC10B TCC-1021: All versions, PC10B-E/C TCU-6521: All versions, PC10E TCC-4737: All versions; TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions, Plus EX TCU-6741: All versions, Plus EX2 TCU-6858: All versions, Plus EFR TCU-6743: All versions, Plus EFR2 TCU-6859: All versions, Plus 2P-EFR TCU-6929: All versions, Plus BUS-EX TCU-6900: All versions; TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions, 2PORT-EFR THU-6404: All versions) are left in an open state by an attacker, Ethernet communications cannot be established with other devices, depending on the settings of the link parameters.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 1.10% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-404
- Affected
- jtekt/pc10g-cpu tcc-6353 firmware · jtekt/pc10ge tcc-6464 firmware · jtekt/pc10p tcc-6372 firmware · jtekt/pc10p-dp tcc-6726 firmware · jtekt/pc10p-dp-io tcc-6752 firmware · jtekt/pc10b-p tcc-6373 firmware · jtekt/pc10b tcc-1021 firmware · jtekt/pc10b-e\/c tcu-6521 firmware · jtekt/pc10e tcc-4737 firmware · jtekt/plus cpu tcc-6740 firmware · jtekt/plus ex tcu-6741 firmware · jtekt/plus ex2 tcu-6858 firmware · jtekt/plus efr tcu-6743 firmware · jtekt/plus efr2 tcu-6859 firmware · jtekt/plus 2p-efr tcu-6929 firmware · jtekt/plus bus-ex tcu-6900 firmware · jtekt/fl\/et-t-v2h thu-6289 firmware · jtekt/2port-efr thu-6404 firmware
- Source
- ics-cert@hq.dhs.gov
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-103-03Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-21-103-03Third Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.