CVE-2021-20986
Hilscher: Denial of Service vulnerability in PROFINET IO Device
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Hilscher: Denial of Service vulnerability in PROFINET IO Device
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
- Record
CVE-2021-20986- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2021-8395
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
- Record
EUVD-2021-8395- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4p8g-xcvq-m8r7
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior...
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
- Record
GHSA-4p8g-xcvq-m8r7- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
- Record
CVE-2021-20986- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
- hilscher profinet io device
- hilscher profinet io device firmware
- pepper+fuchs ohv
- pepper+fuchs oit
- pepper+fuchs pcv/pxv/pgv
- pepper+fuchs pha
- pepper+fuchs pxv/pgv b28 profisafe
- pepper+fuchs wcs
- pepperl-fuchs ohv-f230-b17 firmware
- pepperl-fuchs oit500-f113b17-cb firmware
- pepperl-fuchs pcv100-f200-b17-v1d-6011-6997 firmware
- pepperl-fuchs pcv100-f200-b17-v1d-6011-8203 firmware
Show 19 moreShow less
- pepperl-fuchs pcv100-f200-b17-v1d-6011 firmware
- pepperl-fuchs pcv100-f200-b17-v1d firmware
- pepperl-fuchs pcv50-f200-b17-v1d firmware
- pepperl-fuchs pcv80-f200-b17-v1d firmware
- pepperl-fuchs pgv100-f200-b17-v1d-7477 firmware
- pepperl-fuchs pgv100-f200a-b17-v1d firmware
- pepperl-fuchs pgv100a-f200-b28-v1d firmware
- pepperl-fuchs pgv100a-f200a-b28-v1d firmware
- pepperl-fuchs pgv100aq-f200-b28-v1d firmware
- pepperl-fuchs pgv100aq-f200a-b28-v1d firmware
- pepperl-fuchs pgv150i-f200a-b17-v1d firmware
- pepperl-fuchs pha firmware
- pepperl-fuchs pxv100-f200-b17-v1d-3636 firmware
- pepperl-fuchs pxv100-f200-b17-v1d firmware
- pepperl-fuchs pxv100a-f200-b28-v1d-6011 firmware
- pepperl-fuchs pxv100a-f200-b28-v1d firmware
- pepperl-fuchs pxv100aq-f200-b28-v1d-6011 firmware
- pepperl-fuchs pxv100aq-f200-b28-v1d firmware
- pepperl-fuchs wcs firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-20986 is a high vulnerability (CVSS 7.5) in Hilscher Profinet Io Device, published February 16, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.04%, the 64th percentile. No source names a fixed version.