Login Request a demo
High severity · published Feb 16, 2021
CVE-2021-20986
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7
7.5
CVSS
1%
EPSS
No
On KEV
Description
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Ohv-f230-b17 Firmware · Pepperl-fuchs
through 1.1.0 · source: NVD
OF
Oit500-f113b17-cb Firmware · Pepperl-fuchs
through 1.3.4 · source: NVD
PF
Pcv100-f200-b17-v1d Firmware · Pepperl-fuchs
through 3.2.3 · source: NVD
PF
Pcv100-f200-b17-v1d-6011 Firmware · Pepperl-fuchs
through 3.2.5 · source: NVD
PF
Pcv100-f200-b17-v1d-6011-6997 Firmware · Pepperl-fuchs
through 3.2.3 · source: NVD
PF
Pcv100-f200-b17-v1d-6011-8203 Firmware · Pepperl-fuchs
through 3.2.5 · source: NVD
PF
Pcv50-f200-b17-v1d Firmware · Pepperl-fuchs
through 3.2.3 · source: NVD
PF
Pcv80-f200-b17-v1d Firmware · Pepperl-fuchs
through 3.2.3 · source: NVD
PF
Pgv100-f200-b17-v1d-7477 Firmware · Pepperl-fuchs
through 2.0.0 · source: NVD
PF
Pgv100-f200a-b17-v1d Firmware · Pepperl-fuchs
through 2.0.0 · source: NVD
PF
Pgv100a-f200-b28-v1d Firmware · Pepperl-fuchs
through 1.0.3 · source: NVD
PF
Pgv100a-f200a-b28-v1d Firmware · Pepperl-fuchs
through 1.0.3 · source: NVD
Affected product
PI
Profinet IO Device Firmware
Hilscher
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-20986
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-20986
Third Party Advisory
https://cert.vde.com/en-us/advisories/vde-2021-006
Vendor Advisory
https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device