CVE-2021-20988 Hilscher rcX RTOS: Wrong handling of the UDP checksum
Attackers can cause denial of service on Hilscher rcX RTOS devices by sending malformed UDP packets with incorrect length fields.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-20988?
CVE-2021-20988 is a high-severity denial of service vulnerability in Hilscher Ethernet IO Modules ICE1-16, published on 13 May 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.
Weakness: CWE-119
Which versions are affected by CVE-2021-20988?
It affects 9 products.
Products include Hilscher Rcx Rtos, Pepperl-Fuchs Ice1-16di-G60l-V1d Firmware, Pepperl-Fuchs Ice1-16dio-G60l-C1-V1d Firmware, Pepperl-Fuchs Ice1-16dio-G60l-V1d Firmware, Pepperl-Fuchs Ice1-8di8do-G60l-C1-V1d Firmware, Pepperl-Fuchs Ice1-8di8do-G60l-V1d Firmware and 3 more.
How do I fix CVE-2021-20988?
No fix has been published for CVE-2021-20988 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-20988 being exploited?
There is no known exploitation of CVE-2021-20988 in the wild and no public exploit code.
Sources
Also known as GHSA-473m-ppf7-95wq.