CVE-2021-27477

{"containers": {"cna": {"affected": [{"product": "JTEKT Corporation TOYOPUC PLC", "vendor": "n/a", "versions": [{"status": "affected", "version": "The following versions of the PLC are affected: PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, PC10GE."}]}], "descriptions": [{"lang": "en", "value": "When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-119", "description": "IMPROPER RESTRICTION OF OPERATIONS WITHIN THE BOUNDS OF A MEMORY BUFFER CWE-119", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-07-01T12:01:36.000Z", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "ID": "CVE-2021-27477", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "JTEKT Corporation TOYOPUC PLC", "version": {"version_data": [{"version_value": "The following versions of the PLC are affected: PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, PC10GE."}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "IMPROPER RESTRICTION OF OPERATIONS WITHIN THE BOUNDS OF A MEMORY BUFFER CWE-119"}]}]}, "references": {"reference_data": [{"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04", "refsource": "MISC", "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T20:48:17.271Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04"}]}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2021-27477", "datePublished": "2021-07-01T12:01:36.000Z", "dateReserved": "2021-02-19T00:00:00.000Z", "dateUpdated": "2024-08-03T20:48:17.271Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "JTEKT Corporation TOYOPUC PLC", "vendor": "n/a", "versions": [{"status": "affected", "version": "The following versions of the PLC are affected: PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, PC10GE."}]}], "source": "ics-cert@hq.dhs.gov"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10g-cpu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "22D9DDA3-97E5-4126-A25C-B97CC4E0ECB1", "versionEndExcluding": "3.91", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10g-cpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "BC86B853-5B5B-4289-9A44-5CE055B043EE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:2port-efr_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C664399E-1234-4B87-A95F-3D3EED021E7E", "versionEndExcluding": "1.50", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:2port-efr:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A13F82D-1759-4599-A976-185A13624362", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_cpu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A5D1D75E-5D41-4B0E-AF16-6A23E012185F", "versionEndExcluding": "3.11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_cpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D9F88F4-3DBA-4BCB-B335-792ACD46C41D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_ex_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F60432C2-5D24-4A00-BF0B-1E658DD7E10C", "versionEndExcluding": "3.11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_ex:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBBBFB02-98BA-49AA-89EC-5A2A601425F8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_ex2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "90926718-2F18-40AB-8DB5-8D15D66D8396", "versionEndExcluding": "3.11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_ex2:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA38A495-AF65-4819-BEBC-F23A4B8FFA0F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_efr_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FD733D20-E696-4713-9509-AEED02753EF0", "versionEndExcluding": "3.11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_efr:-:*:*:*:*:*:*:*", "matchCriteriaId": "466211B5-2205-4C37-ABBC-0C0E089D8C27", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_efr2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3EC7E293-6A02-405D-8D0F-9D28220463E1", "versionEndExcluding": "3.11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_efr2:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AC3C38F-361E-4FF9-B7DE-06B559501DA7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_2p-efr_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E4791655-E74A-4095-8D8F-2C2B4503CC12", "versionEndExcluding": "3.11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_2p-efr:-:*:*:*:*:*:*:*", "matchCriteriaId": "46EBD44A-2598-4E62-8A55-A752A64EDE98", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10p-dp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EE4A9827-4275-4272-9296-FFF0D9E384D4", "versionEndExcluding": "1.50", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10p-dp:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0B3FDE8-3035-4C51-A182-E51644C7F5F1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10p-dp-io_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "207AF20B-B162-4CD9-8232-889E678143FB", "versionEndExcluding": "1.50", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10p-dp-io:-:*:*:*:*:*:*:*", "matchCriteriaId": "C7D9B4E8-78A6-437C-8F8C-8D79675BE5CB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:plus_bus-ex_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3811E760-B0AD-40A0-BB1A-B62F9EE428CD", "versionEndExcluding": "2.13", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:plus_bus-ex:-:*:*:*:*:*:*:*", "matchCriteriaId": "B9A82BE9-F39A-47A7-9520-77AAFAA7B32A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:nano_10gx_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E5A4C13D-C002-4333-8C77-F081036F76B3", "versionEndExcluding": "3.00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:nano_10gx:-:*:*:*:*:*:*:*", "matchCriteriaId": "00855C73-B9ED-4FA3-BDCC-48AD3FC48FF9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:nano_2et_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "60E21DE9-8377-4B68-AF43-B4B34F966D99", "versionEndExcluding": "2.40", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:nano_2et:-:*:*:*:*:*:*:*", "matchCriteriaId": "36DC1328-A8C0-4BEC-A645-542F509537F6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10pe_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B6233EC3-DCB8-4791-B8F1-1F5A4CE21A41", "versionEndExcluding": "1.02", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10pe:-:*:*:*:*:*:*:*", "matchCriteriaId": "100ACE3B-F022-4123-8961-EB347C42D028", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10pe-16\\/16p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "991DF456-2F99-4C1C-857B-2F2EFF4683C1", "versionEndExcluding": "1.02", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10pe-16\\/16p:-:*:*:*:*:*:*:*", "matchCriteriaId": "F3CDA45F-6A2A-4BDF-9F0D-24EE765C6591", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10e_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1982B0CF-4BBB-494F-8A54-1970BC418022", "versionEndExcluding": "1.02", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10e:-:*:*:*:*:*:*:*", "matchCriteriaId": "A3FC9555-212D-45FE-94E4-9856A6AC91D2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:fl\\/et-t-v2h_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "223BE690-BD32-48AE-8225-7EA45197136C", "versionEndExcluding": "f2.8_e1.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:fl\\/et-t-v2h:-:*:*:*:*:*:*:*", "matchCriteriaId": "C1C90F4A-1BB8-4E8F-B5E1-B3EA43D0FBE7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10b_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C254E232-8DD3-482F-8562-892A0571B084", "versionEndExcluding": "1.11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10b:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4D57AED-D31C-4105-99D8-06742DF7A75C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10b-p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2087D15B-0258-45E8-804A-0FD55290BBE3", "versionEndExcluding": "1.11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10b-p:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B8703AC-8F8E-42B9-AAB3-D4F47B46190E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:nano_cpu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B5EA675C-9EEF-4CA6-9D06-EF4E20FBD4D5", "versionEndExcluding": "2.08", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:nano_cpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "98E70744-495C-425D-A8A4-6C421B3253EE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A5DD46C4-4756-4965-A293-174F766B409F", "versionEndExcluding": "1.05", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10p:-:*:*:*:*:*:*:*", "matchCriteriaId": "322AD962-FAF4-4AEE-BFC0-275AEF6F4C67", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:jtekt:pc10ge_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0F2ADB5C-A29F-42F9-81D8-64B4448C996A", "versionEndExcluding": "1.04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:jtekt:pc10ge:-:*:*:*:*:*:*:*", "matchCriteriaId": "54CA6C5D-D9CB-4E27-AA6B-0276A7499315", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop."}, {"lang": "es", "value": "Cuando JTEKT Corporation TOYOPUC PLC versiones PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P y PC10GE reciben una trama no v\u00e1lida, el \u00e1rea exterior de un b\u00fafer de recepci\u00f3n para FL-net se sobrescribe. Como resultado, la CPU del PLC detecta un error del sistema y los productos afectados se detienen"}], "id": "CVE-2021-27477", "lastModified": "2026-06-17T03:44:56.673", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-07-01T13:15:08.003", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}