high7.5
CVE-2021-27477
When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BU…
Impact
When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jtekt | Pc10g-Cpu Firmware | before 3.91 |
| Jtekt | 2port-Efr Firmware | before 1.50 |
| Jtekt | Plus Cpu Firmware | before 3.11 |
| Jtekt | Plus Ex Firmware | before 3.11 |
| Jtekt | Plus Ex2 Firmware | before 3.11 |
| Jtekt | Plus Efr Firmware | before 3.11 |
| Jtekt | Plus Efr2 Firmware | before 3.11 |
| Jtekt | Plus 2p-Efr Firmware | before 3.11 |
| Jtekt | Pc10p-Dp Firmware | before 1.50 |
| Jtekt | Pc10p-Dp-Io Firmware | before 1.50 |
| Jtekt | Plus Bus-Ex Firmware | before 2.13 |
| Jtekt | Nano 10gx Firmware | before 3.00 |