Skip to content
OpenAdvisories
High VDE-2021-007 1 CVE

Pepperl+Fuchs: Multiple Products - Vulnerability may allow remote attackers to cause a Denial Of Service

Published Feb 16, 2021 · Updated May 14, 2025 · Revision 2

Vendor: Pepperl+Fuchs Product: PCV100-F200-B25-V1D-6011 Product: PCV100-F200-B25-V1D-6011-6720 Product: PCV50-F200-B25-V1D Product: PCV80-F200-B25-V1D Product: PXV100-F200-B25-V1D Product: PXV100I-F200-B25-V1D Product: WCS3B-LS510 Product: WCS3B-LS510-OM Product: WCS3B-LS510D Product: WCS3B-LS510D-OM Product: WCS3B-LS510DH Product: WCS3B-LS510DH-OM Product: WCS3B-LS510H Product: WCS3B-LS510H-OM

Summary

Critical vulnerability has been discovered in the utilized component Ethernet IP Stack by Hilscher Gesellschaft für Systemautomation mbH.
The impact of the vulnerability on the affected device is that it can

denial of service
remote code execution
code exposure
For more information see advisory by Hilscher:
https://kb.hilscher.com/pages/viewpage.action?pageId=108969480

Details

Impact
Pepperl+Fuchs analyzed and identified affected devices.
Remote attackers may cause a cause a Denial Of Service of the product.

Mitigation
An external protective measure is required.

Minimize network exposure for affected products and ensure that they are not accessible via the Internet.
Isolate affected products from the corporate network.
If remote access is required, use secure methods such as virtual private networks (VPNs).

Vulnerabilities 1

  • High 8.6
    CVE-2021-20987

    Hilscher: EtherNet/IP stack crash for specific CIP service

    A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.

    Pepper+Fuchs Hilscher PCV/PXV/PGV WCS

Revision history

  1. #2

    Fix: version space, added distribution

  2. #1

    Initial revision.

References