Medium severity · published Sep 10, 2021
CVE-2021-33011
All versions of the afffected TOYOPUC-PC10 Series,TOYOPUC-Plus Series,TOYOPUC-PC3J/PC2J Series, TOYOPUC-Nano Series products may not be able to properly process an ICMP flood,…
4.3
CVSS
0.4%
EPSS
No
On KEV
Description
All versions of the afffected TOYOPUC-PC10 Series,TOYOPUC-Plus Series,TOYOPUC-PC3J/PC2J Series, TOYOPUC-Nano Series products may not be able to properly process an ICMP flood, which may allow an attacker to deny Ethernet communications between affected devices.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
2T
2port-efr Thu-6404 Firmware · Jtekt
All versions, or not specified · source: NVD
ET
Ef10 Tcu-6982 Firmware · Jtekt
All versions, or not specified · source: NVD
FT
Fl/et-t-v2h Thu-6289 Firmware · Jtekt
All versions, or not specified · source: NVD
N1
Nano 10gx Tuc-1157 Firmware · Jtekt
All versions, or not specified · source: NVD
N2
Nano 2et Tuu-6949 Firmware · Jtekt
All versions, or not specified · source: NVD
NC
Nano Cpu Tuc-6941 Firmware · Jtekt
All versions, or not specified · source: NVD
NS
Nano Safety Rs00ip Tuu-1086 Firmware · Jtekt
All versions, or not specified · source: NVD
NS
Nano Safety Rs01ip Tuu-1087 Firmware · Jtekt
All versions, or not specified · source: NVD
NS
Nano Safety Tuc-1085 Firmware · Jtekt
All versions, or not specified · source: NVD
PT
Pc10b Tcc-1021 Firmware · Jtekt
All versions, or not specified · source: NVD
PT
Pc10b-e/c Tcu-6521 Firmware · Jtekt
All versions, or not specified · source: NVD
PT
Pc10b-p Tcc-6373 Firmware · Jtekt
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-33011
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-33011
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-245-02
More from 2port-efr Thu-6404 Firmware
7.5
CVE-2021-27458
If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372:…