Read the docs
TI-2021-04093 Aliases CVE-2021-20987GHSA-r5x8-6vj6-82q6

Hilscher: EtherNet/IP stack crash for specific CIP service

Priority MEDIUM 40CWE-787Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.

Why it matters now

EPSS 0.01138 66th percentileScored 2026-11-07
Fix Fixed EtherNet/IP Core V2 (Hilscher): V2.13.0.21

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HilscherEtherNet/IP Core V2V2 to before V2.13.0.21V2.13.0.21Patch availableCNA
Pepperl+FuchsPCV/PXV/PGVPXV100-F200-B25-V1D, PXV100I-F200-B25-V1D, PCV100-F200-B25-V1D-6011-6720, PCV50-F200-B25-V1D, PCV80-F200-B25-V1D, PCV100-F200-B25-V1D-6011 – V1.10.0—No fix listedCNA
Pepperl+FuchsWCSWCS3B-LS510, WCS3B-LS510H, WCS3B-LS510D, WCS3B-LS510DH, WCS3B-LS510H-OM, WCS3B-LS510DH-OM, WCS3B-LS510D-OM, WCS3B-LS510-OM – V1.2.1—No fix listedCNA
  • EtherNet/IP Core V2 VendorHilscher Affected V2 to before V2.13.0.21 Fixed in V2.13.0.21 Patch available CNA
  • PCV/PXV/PGV VendorPepperl+Fuchs Affected PXV100-F200-B25-V1D, PXV100I-F200-B25-V1D, PCV100-F200-B25-V1D-6011-6720, PCV50-F200-B25-V1D, PCV80-F200-B25-V1D, PCV100-F200-B25-V1D-6011 – V1.10.0 Fixed in — No fix listed CNA
  • WCS VendorPepperl+Fuchs Affected WCS3B-LS510, WCS3B-LS510H, WCS3B-LS510D, WCS3B-LS510DH, WCS3B-LS510H-OM, WCS3B-LS510DH-OM, WCS3B-LS510D-OM, WCS3B-LS510-OM – V1.2.1 Fixed in — No fix listed CNA

CPE configurations NVD · 23

CPEVersionsRoleVendor
cpe:2.3:o:hilscher:ethernet\/ip_adapter_firmware:*:*:*:*:*:*:*:*2.0 to before 2.13.0.21VulnerableHilscher
cpe:2.3:h:hilscher:ethernet\/ip_adapter:-:*:*:*:*:*:*:*not specified by NVDRunning onHilscher
cpe:2.3:o:pepperl-fuchs:wcs_firmware:*:*:*:*:*:*:*:*up to 1.2.1VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:wcs3b-ls510:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:wcs3b-ls510-om:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:wcs3b-ls510d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:wcs3b-ls510d-om:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:wcs3b-ls510dh:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:wcs3b-ls510dh-om:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:wcs3b-ls510h:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
  • cpe:2.3:o:hilscher:ethernet\/ip_adapter_firmware:*:*:*:*:*:*:*:* Versions 2.0 to before 2.13.0.21 Vulnerable ·Hilscher
  • cpe:2.3:h:hilscher:ethernet\/ip_adapter:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hilscher
  • cpe:2.3:o:pepperl-fuchs:wcs_firmware:*:*:*:*:*:*:*:* Versions up to 1.2.1 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:wcs3b-ls510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:wcs3b-ls510-om:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:wcs3b-ls510d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:wcs3b-ls510d-om:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:wcs3b-ls510dh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:wcs3b-ls510dh-om:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:wcs3b-ls510h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
Show 13 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:pepperl-fuchs:wcs3b-ls510h-om:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:pxv100-f200-b25-v1d_firmware:*:*:*:*:*:*:*:*up to 1.10.0VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:pxv100-f200-b25-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:pxv100i-f200-b25-v1d_firmware:*:*:*:*:*:*:*:*up to 1.10.0VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:pxv100i-f200-b25-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:pcv100-f200-b25-v1d-6011-6720_firmware:*:*:*:*:*:*:*:*up to 1.10.0VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:pcv100-f200-b25-v1d-6011-6720:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:pcv50-f200-b25-v1d_firmware:*:*:*:*:*:*:*:*up to 1.10.0VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:pcv50-f200-b25-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:pcv80-f200-b25-v1d_firmware:*:*:*:*:*:*:*:*up to 1.10.0VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:pcv80-f200-b25-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:pcv100-f200-b25-v1d-6011_firmware:*:*:*:*:*:*:*:*up to 1.10.0VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:pcv100-f200-b25-v1d-6011:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:wcs3b-ls510h-om:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:pxv100-f200-b25-v1d_firmware:*:*:*:*:*:*:*:* Versions up to 1.10.0 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:pxv100-f200-b25-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:pxv100i-f200-b25-v1d_firmware:*:*:*:*:*:*:*:* Versions up to 1.10.0 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:pxv100i-f200-b25-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:pcv100-f200-b25-v1d-6011-6720_firmware:*:*:*:*:*:*:*:* Versions up to 1.10.0 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:pcv100-f200-b25-v1d-6011-6720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:pcv50-f200-b25-v1d_firmware:*:*:*:*:*:*:*:* Versions up to 1.10.0 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:pcv50-f200-b25-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:pcv80-f200-b25-v1d_firmware:*:*:*:*:*:*:*:* Versions up to 1.10.0 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:pcv80-f200-b25-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:pcv100-f200-b25-v1d-6011_firmware:*:*:*:*:*:*:*:* Versions up to 1.10.0 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:pcv100-f200-b25-v1d-6011:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs

Remediation

  • Fix · CNA EtherNet/IP Core V2 (Hilscher) Fixed in V2.13.0.21

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-20987
  2. 2026-10-03 Alias added: GHSA-r5x8-6vj6-82q6

References

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences