{"id":"CVE-2021-20987","aliases":["EUVD-2021-8396","GHSA-r5x8-6vj6-82q6"],"status":"published","title":"Hilscher: EtherNet/IP stack crash for specific CIP service","description":"A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01152,"percentile":0.67353,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2021-02-16T16:37:09Z","modified":"2026-06-17T03:34:36Z","products":[{"vendor":"hilscher","product":"ethernet/ip core v2"},{"vendor":"hilscher","product":"ethernet\\/ip_adapter_firmware"},{"vendor":"pepper+fuchs","product":"pcv/pxv/pgv"},{"vendor":"pepper+fuchs","product":"wcs"},{"vendor":"pepperl-fuchs","product":"pcv100-f200-b25-v1d-6011-6720_firmware"},{"vendor":"pepperl-fuchs","product":"pcv100-f200-b25-v1d-6011_firmware"},{"vendor":"pepperl-fuchs","product":"pcv50-f200-b25-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pcv80-f200-b25-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pxv100-f200-b25-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"pxv100i-f200-b25-v1d_firmware"},{"vendor":"pepperl-fuchs","product":"wcs_firmware"}],"references":[{"url":"https://kb.hilscher.com/pages/viewpage.action?pageId=108969480","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2021-007","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20987"},{"url":"https://github.com/advisories/GHSA-r5x8-6vj6-82q6"}],"sources":{"cve":[{"id":"CVE-2021-20987","title":"Hilscher: EtherNet/IP stack crash for specific CIP service","description":"A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.","status":"published","published":"2021-02-16T16:37:09.731Z","modified":"2024-09-16T16:23:03.443Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:32:55.564736Z"}],"euvd":[{"id":"EUVD-2021-8396","description":"A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.","status":"published","published":"2021-02-16T16:37:09Z","modified":"2024-09-16T16:23:03Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:52.084115Z"}],"ghsa":[{"id":"GHSA-r5x8-6vj6-82q6","title":"A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2...","description":"A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.","status":"published","published":"2022-05-24T17:42:20Z","modified":"2023-01-29T05:05:43Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:45:51.862752Z"}],"nvd":[{"id":"CVE-2021-20987","description":"A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.","status":"published","published":"2021-02-16T17:15:12.973Z","modified":"2026-06-17T03:34:36.187Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:50.031227Z"}]}}