High severity · published Jul 1, 2021
CVE-2021-27477
When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX,…
7.5
CVSS
1.1%
EPSS
No
On KEV
Description
When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
2F
2port-efr Firmware · Jtekt
before 1.50 · source: NVD
FF
Fl/et-t-v2h Firmware · Jtekt
before f2.8_e1.5 · source: NVD
N1
Nano 10gx Firmware · Jtekt
before 3.00 · source: NVD
N2
Nano 2et Firmware · Jtekt
before 2.40 · source: NVD
NC
Nano Cpu Firmware · Jtekt
before 2.08 · source: NVD
PF
Pc10b Firmware · Jtekt
before 1.11 · source: NVD
PF
Pc10b-p Firmware · Jtekt
before 1.11 · source: NVD
PF
Pc10e Firmware · Jtekt
before 1.02 · source: NVD
PF
Pc10g-cpu Firmware · Jtekt
before 3.91 · source: NVD
PF
Pc10ge Firmware · Jtekt
before 1.04 · source: NVD
PF
Pc10p Firmware · Jtekt
before 1.05 · source: NVD
PF
Pc10p-dp Firmware · Jtekt
before 1.50 · source: NVD