What is the CVSS score of CVE-2021-20987?

CVE-2021-20987 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H. EPSS exploitation probability: 1.1%.

Ethernet Ip Adapter Firmware CVE-2021-20987

HIGH

Out-of-bounds Write (CWE-787)

2021-02-16 info@cert.vde.com

Buffer Overflow Denial Of Service Memory Corruption Ethernet Ip Adapter Firmware Wcs Firmware Pxv100 F200 B25 V1D Firmware Pxv100I F200 B25 V1D Firmware Pcv100 F200 B25 V1D 6011 6720 Firmware Pcv50 F200 B25 V1D Firmware Pcv80 F200 B25 V1D Firmware Pcv100 F200 B25 V1D 6011 Firmware

8.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.6 HIGH

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Feb 16, 2021 - 17:15 nvd

HIGH 8.6

DescriptionNVD

AnalysisAI

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery. Affected products include: Hilscher Ethernet\/Ip Adapter Firmware, Pepperl-Fuchs Wcs Firmware, Pepperl-Fuchs Pxv100-F200-B25-V1D Firmware, Pepperl-Fuchs Pxv100I-F200-B25-V1D Firmware, Pepperl-Fuchs Pcv100-F200-B25-V1D-6011-6720 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).