Description
In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hilscher | rcX RTOS | unspecified – < V2.1.14.1 | V2.1.14.1 |
| Pepperl+Fuchs | Ethernet IO Modules ICE1-16 | ICE1-16DI-G60L-V1D – ≤ F10017, ICE1-16DIO-G60L-C1-V1D – ≤ F10017, ICE1-16DIO-G60L-V1D – ≤ F10017 | — |
| Pepperl+Fuchs | Ethernet IO Modules ICE1-8 | ICE1-8DI8DO-G60L-C1-V1D – ≤ F10017, ICE1-8DI8DO-G60L-V1D – ≤ F10017, ICE1-8IOL-G30L-V1D – ≤ F10017, ICE1-8IOL-G60L-V1D – ≤ F10017, ICE1-8IOL-S2-G60L-V1D – ≤ F10017 | — |
Advisories 1
- VDE-2021-018 Pepperl+Fuchs: Multiple vulnerabilites in ICE1 Ethernet IO Modules CERT@VDE · May 12, 2021