CVE-2021-20987 Hilscher: EtherNet/IP stack crash for specific CIP service
Attackers can cause device crashes or execute arbitrary code via network packets in Hilscher EtherNet/IP stacks, impacting industrial control systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-20987?
CVE-2021-20987 is a high-severity memory corruption vulnerability in Hilscher EtherNet/IP Core V2, published on 16 Feb 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.
Weakness: CWE-787
Which versions are affected by CVE-2021-20987?
It affects 8 products.
Products include Hilscher Ethernet\/Ip Adapter Firmware, Pepperl-Fuchs Pcv100-F200-B25-V1d-6011-6720 Firmware, Pepperl-Fuchs Pcv100-F200-B25-V1d-6011 Firmware, Pepperl-Fuchs Pcv50-F200-B25-V1d Firmware, Pepperl-Fuchs Pcv80-F200-B25-V1d Firmware, Pepperl-Fuchs Pxv100-F200-B25-V1d Firmware and 2 more.
How do I fix CVE-2021-20987?
No fix has been published for CVE-2021-20987 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-20987 being exploited?
There is no known exploitation of CVE-2021-20987 in the wild and no public exploit code.
Sources
Also known as GHSA-r5x8-6vj6-82q6.