{"id":"CVE-2021-20986","aliases":["EUVD-2021-8395","GHSA-4p8g-xcvq-m8r7"],"status":"published","title":"Hilscher: Denial of Service vulnerability in PROFINET IO Device","description":"A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0105,"percentile":0.6474,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2021-02-16T16:35:48Z","modified":"2026-06-17T03:34:36Z","products":[{"vendor":"hilscher","product":"profinet io device"},{"vendor":"hilscher","product":"profinet_io_device_firmware"},{"vendor":"pepper+fuchs","product":"ohv"},{"vendor":"pepper+fuchs","product":"oit"},{"vendor":"pepper+fuchs","product":"pcv/pxv/pgv"},{"vendor":"pepper+fuchs","product":"pha"},{"vendor":"pepper+fuchs","product":"pxv/pgv b28 profisafe"},{"vendor":"pepper+fuchs","product":"wcs"},{"vendor":"pepperl-fuchs","product":"ohv-f230-b17_firmware"},{"vendor":"pepperl-fuchs","product":"oit500-f113b17-cb_firmware"},{"vendor":"pepperl-fuchs","product":"pcv100-f200-b17-v1d-6011-6997_firmware"},{"vendor":"pepperl-fuchs","product":"pcv100-f200-b17-v1d-6011-8203_firmware"},{"vendor":"pepperl-fuchs","product":"pcv100-f200-b17-v1d-6011_firmware"},{"vendor":"pepperl-fuchs","product":"pcv100-f200-b17-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pcv50-f200-b17-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pcv80-f200-b17-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pgv100-f200-b17-v1d-7477_firmware"},{"vendor":"pepperl-fuchs","product":"pgv100-f200a-b17-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pgv100a-f200-b28-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pgv100a-f200a-b28-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pgv100aq-f200-b28-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pgv100aq-f200a-b28-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pgv150i-f200a-b17-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pha_firmware"},{"vendor":"pepperl-fuchs","product":"pxv100-f200-b17-v1d-3636_firmware"},{"vendor":"pepperl-fuchs","product":"pxv100-f200-b17-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pxv100a-f200-b28-v1d-6011_firmware"},{"vendor":"pepperl-fuchs","product":"pxv100a-f200-b28-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pxv100aq-f200-b28-v1d-6011_firmware"},{"vendor":"pepperl-fuchs","product":"pxv100aq-f200-b28-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"wcs_firmware"}],"references":[{"url":"https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2021-006","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20986"},{"url":"https://github.com/advisories/GHSA-4p8g-xcvq-m8r7"}],"sources":{"cve":[{"id":"CVE-2021-20986","title":"Hilscher: Denial of Service vulnerability in PROFINET IO Device","description":"A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.","status":"published","published":"2021-02-16T16:35:48.46Z","modified":"2024-09-16T23:46:42.601Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:32:55.19484Z"}],"euvd":[{"id":"EUVD-2021-8395","description":"A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.","status":"published","published":"2021-02-16T16:35:48Z","modified":"2024-09-16T23:46:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:54:46.734285Z"}],"ghsa":[{"id":"GHSA-4p8g-xcvq-m8r7","title":"A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior...","description":"A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.","status":"published","published":"2022-05-24T17:42:21Z","modified":"2023-01-29T05:06:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:46:02.943866Z"}],"nvd":[{"id":"CVE-2021-20986","description":"A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.","status":"published","published":"2021-02-16T17:15:12.817Z","modified":"2026-06-17T03:34:36.007Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:50.031227Z"}]}}