CVE-2021-20987highCWE-787

CVE-2021-20987: high-severity vulnerability in Hilscher EtherNet/IP Core V2

Hilscher: EtherNet/IP stack crash for specific CIP service

Published · Updated

Follow this CVE+ Monitor PCV/PXV/PGV+ Monitor WCS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 1.2%
A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected products
Hilscher · EtherNet/IP Core V2Pepper+Fuchs · PCV/PXV/PGVPepper+Fuchs · WCS
Related CVEs — Hilscher EtherNet/IP Core V2

In the same product, most dangerous first.

CVE-2021-20986HIGHHilscher: Denial of Service vulnerability in PROFINET IO DeviceEPSS 1.1%