Vulnerability Description
When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jtekt | Pc10G-Cpu Firmware | < 3.91 |
| Jtekt | Pc10G-Cpu | - |
| Jtekt | 2Port-Efr Firmware | < 1.50 |
| Jtekt | 2Port-Efr | - |
| Jtekt | Plus Cpu Firmware | < 3.11 |
| Jtekt | Plus Cpu | - |
| Jtekt | Plus Ex Firmware | < 3.11 |
| Jtekt | Plus Ex | - |
| Jtekt | Plus Ex2 Firmware | < 3.11 |
| Jtekt | Plus Ex2 | - |
| Jtekt | Plus Efr Firmware | < 3.11 |
| Jtekt | Plus Efr | - |
| Jtekt | Plus Efr2 Firmware | < 3.11 |
| Jtekt | Plus Efr2 | - |
| Jtekt | Plus 2P-Efr Firmware | < 3.11 |
| Jtekt | Plus 2P-Efr | - |
| Jtekt | Pc10P-Dp Firmware | < 1.50 |
| Jtekt | Pc10P-Dp | - |
| Jtekt | Pc10P-Dp-Io Firmware | < 1.50 |
| Jtekt | Pc10P-Dp-Io | - |
Related Weaknesses (CWE)
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04Third Party AdvisoryUS Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2021-27477?
CVE-2021-27477 is a vulnerability with a CVSS score of 7.5 (HIGH). When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-...
How severe is CVE-2021-27477?
CVE-2021-27477 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-27477?
Check the references section above for vendor advisories and patch information. Affected products include: Jtekt Pc10G-Cpu Firmware, Jtekt Pc10G-Cpu, Jtekt 2Port-Efr Firmware, Jtekt 2Port-Efr, Jtekt Plus Cpu Firmware.