VDE-2021-018 | Vulnetix

VDE-2021-018 PUBLISHED CVSS 4.699999809265137 MEDIUM

Record from circl · Published May 12, 2021

Critical vulnerability has been discovered in the utilized components rcX, mbedTLS, PROFINET IO Device and EtherNet/IP Core by Hilscher Gesellschaft für Systemautomation mbH. The impact of the vulnerabilities on the affected device is that it can result in: * Denial of Service (DoS) * Remote Code Execution (RCE) * Code Exposure **Note:** ICE1-8IOL-S2-G60L-V1D (70103603) is not affected by CVE-2021-20986

Risk scores

CVSS 3.1

4.699999809265137

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Vendor	Product	Versions
	Hardware ICE1-16DIO-G60L-C1-V1D <= F10017
	Hardware ICE1-8DI8DO-G60L-C1-V1D <= F10017
	Hardware ICE1-8IOL-S2-G60L-V1D <= F10017
	Hardware ICE1-16DI-G60L-V1D <= F10017
	Hardware ICE1-8DI8DO-G60L-V1D <= F10017
	Hardware ICE1-8IOL-G60L-V1D <= F10017
	Hardware ICE1-8IOL-G30L-V1D <= F10017
	Hardware ICE1-16DIO-G60L-V1D <= F10017

Timeline

May 12, 2021 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln VDE-2021-018
vulnetix vdb fixes VDE-2021-018

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/VDE-2021-018/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →