QID 590546

Date Published: 2021-10-14

QID 590546: JTEKT TOYOPUC Products Denial of Service (DoS) Vulnerability (ICSA-21-245-02)

AFFECTED PRODUCTS
The following versions of these TOYOPUC products are affected:
TOYOPUC-PC10 Series:


PC10G-CPU TCC-6353: All versions
PC10GE TCC-6464: All versions
PC10P TCC-6372: All versions
PC10P-DP TCC-6726: All versions
PC10P-DP-IO TCC-6752: All versions
PC10B-P TCC-6373: All versions
PC10B TCC-1021: All versions
PC10B-E/C TCU-6521: All versions
PC10E TCC-4637: All versions
PC10PE TCC-1101: All versions
PC10PE-1616P TCC-1102: All versions
EF10 TCU-6982: All versions
Successful exploitation of this vulnerability could allow a remote attacker to deny Ethernet communications between affected devices without authorization.

  • CVSS V3 rated as Medium - 4.3 severity.
  • CVSS V2 rated as Medium - 3.3 severity.
  • Solution

    Customers are advised to refer to CERT MITIGATIONS section ICSA-21-245-02 for affected packages and patching details.
    TOYOPUC-Plus Series:Workaround:

    TOYOPUC-PC3J/PC2J Series:

    Vendor References

    CVEs related to QID 590546

    Software Advisories
    Advisory ID Software Component Link
    ICSA-21-245-02 URL Logo www.us-cert.gov/ics/advisories/ICSA-21-245-02