CVE-2021-20988

Hilscher rcX RTOS: Wrong handling of the UDP checksum

State: Published
Severity: 8.6 High
Published: May 13, 2021
Updated: Sep 16, 2024
Reserved: Dec 17, 2020

Description

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.

Scores

CVSS	Score	Vector	Source
3.1	8.6 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	CERTVDE

Weaknesses

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

Product	Versions
rcX RTOSHilscher	before V2.1.14.1Affected
Ethernet IO Modules ICE1-16Pepperl+Fuchs	ICE1-16DI-G60L-V1D through F10017Affected ICE1-16DIO-G60L-C1-V1D through F10017Affected ICE1-16DIO-G60L-V1D through F10017Affected
Ethernet IO Modules ICE1-8Pepperl+Fuchs	ICE1-8DI8DO-G60L-C1-V1D through F10017Affected ICE1-8DI8DO-G60L-V1D through F10017Affected ICE1-8IOL-G30L-V1D through F10017Affected ICE1-8IOL-G60L-V1D through F10017Affected ICE1-8IOL-S2-G60L-V1D through F10017Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.