High ICSA-21-243-02 2 CVEs

FANUC Robot Controllers (Update A)

Published Aug 31, 2021 · Updated Feb 3, 2022 · Revision 3

Vendor: FANUC Product: R-30iA, R-30iA Mate

Summary

Successful exploitation of these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow remote code execution.

Vulnerabilities 2

High 7.5

CVE-2021-32996

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to cra…

FANUC R-30iB Plus, R-30iB Mate Plus, R-30iB Compact Plus, R-30iB Mini Plus R-30iB, R-30iB Mate, R-30iB Compact R-30iA, R-30iA Mate

Jan 7, 2022
High 7.4

CVE-2021-32998

The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to…

FANUC R-30iB, R-30iB Mate, R-30iB Compact R-30iA, R-30iA Mate R-30iB Plus, R-30iB Mate Plus, R-30iB Compact Plus, R-30iB Mini Plus

Jan 7, 2022

Revision history

2022-02-03 #3
ICSA-21-243-02 FANUC Robot Controllers (Update B)
2021-12-07 #2
ICSA-21-243-02 FANUC Robot Controllers (Update A)
2021-08-31 #1
ICSA-21-243-02P FANUC Robot Controllers

References

ICS Advisory ICSA-21-243-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-243-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B