Read the docs
TI-2021-04094 Aliases CVE-2021-20988GHSA-473m-ppf7-95wq

Hilscher rcX RTOS: Wrong handling of the UDP checksum

Priority LOW 39CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.

Why it matters now

EPSS 0.0099 62nd percentileScored 2026-11-07
Fix Fixed rcX RTOS (Hilscher): V2.1.14.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HilscherrcX RTOSbefore V2.1.14.1V2.1.14.1Patch availableCNA
Pepperl+FuchsEthernet IO Modules ICE1-16ICE1-16DI-G60L-V1D – F10017; ICE1-16DIO-G60L-C1-V1D – F10017; ICE1-16DIO-G60L-V1D – F10017—No fix listedCNA
Pepperl+FuchsEthernet IO Modules ICE1-8ICE1-8DI8DO-G60L-C1-V1D – F10017; ICE1-8DI8DO-G60L-V1D – F10017; ICE1-8IOL-G30L-V1D – F10017; ICE1-8IOL-G60L-V1D – F10017; ICE1-8IOL-S2-G60L-V1D – F10017—No fix listedCNA
  • rcX RTOS VendorHilscher Affected before V2.1.14.1 Fixed in V2.1.14.1 Patch available CNA
  • Ethernet IO Modules ICE1-16 VendorPepperl+Fuchs Affected ICE1-16DI-G60L-V1D – F10017; ICE1-16DIO-G60L-C1-V1D – F10017; ICE1-16DIO-G60L-V1D – F10017 Fixed in — No fix listed CNA
  • Ethernet IO Modules ICE1-8 VendorPepperl+Fuchs Affected ICE1-8DI8DO-G60L-C1-V1D – F10017; ICE1-8DI8DO-G60L-V1D – F10017; ICE1-8IOL-G30L-V1D – F10017; ICE1-8IOL-G60L-V1D – F10017; ICE1-8IOL-S2-G60L-V1D – F10017 Fixed in — No fix listed CNA

CPE configurations NVD · 17

CPEVersionsRoleVendor
cpe:2.3:a:hilscher:rcx_rtos:*:*:*:*:*:*:*:*before 2.1.14.1VulnerableHilscher
cpe:2.3:o:pepperl-fuchs:ice1-16di-g60l-v1d_firmware:*:*:*:*:*:*:*:*up to f10017VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:ice1-16di-g60l-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:ice1-16dio-g60l-c1-v1d_firmware:*:*:*:*:*:*:*:*up to f10017VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:ice1-16dio-g60l-c1-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:ice1-16dio-g60l-v1d_firmware:*:*:*:*:*:*:*:*up to f10017VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:ice1-16dio-g60l-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:ice1-8di8do-g60l-c1-v1d_firmware:*:*:*:*:*:*:*:*up to f10017VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:ice1-8di8do-g60l-c1-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:ice1-8di8do-g60l-v1d_firmware:*:*:*:*:*:*:*:*up to f10017VulnerablePepperl+Fuchs
  • cpe:2.3:a:hilscher:rcx_rtos:*:*:*:*:*:*:*:* Versions before 2.1.14.1 Vulnerable ·Hilscher
  • cpe:2.3:o:pepperl-fuchs:ice1-16di-g60l-v1d_firmware:*:*:*:*:*:*:*:* Versions up to f10017 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:ice1-16di-g60l-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:ice1-16dio-g60l-c1-v1d_firmware:*:*:*:*:*:*:*:* Versions up to f10017 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:ice1-16dio-g60l-c1-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:ice1-16dio-g60l-v1d_firmware:*:*:*:*:*:*:*:* Versions up to f10017 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:ice1-16dio-g60l-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:ice1-8di8do-g60l-c1-v1d_firmware:*:*:*:*:*:*:*:* Versions up to f10017 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:ice1-8di8do-g60l-c1-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:ice1-8di8do-g60l-v1d_firmware:*:*:*:*:*:*:*:* Versions up to f10017 Vulnerable ·Pepperl+Fuchs
Show 7 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:pepperl-fuchs:ice1-8di8do-g60l-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:ice1-8iol-g30l-v1d_firmware:*:*:*:*:*:*:*:*up to f10017VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:ice1-8iol-g30l-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:ice1-8iol-g60l-v1d_firmware:*:*:*:*:*:*:*:*up to f10017VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:ice1-8iol-g60l-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
cpe:2.3:o:pepperl-fuchs:ice1-8iol-s2-g60l-v1d_firmware:*:*:*:*:*:*:*:*up to f10017VulnerablePepperl+Fuchs
cpe:2.3:h:pepperl-fuchs:ice1-8iol-s2-g60l-v1d:-:*:*:*:*:*:*:*not specified by NVDRunning onPepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:ice1-8di8do-g60l-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:ice1-8iol-g30l-v1d_firmware:*:*:*:*:*:*:*:* Versions up to f10017 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:ice1-8iol-g30l-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:ice1-8iol-g60l-v1d_firmware:*:*:*:*:*:*:*:* Versions up to f10017 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:ice1-8iol-g60l-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs
  • cpe:2.3:o:pepperl-fuchs:ice1-8iol-s2-g60l-v1d_firmware:*:*:*:*:*:*:*:* Versions up to f10017 Vulnerable ·Pepperl+Fuchs
  • cpe:2.3:h:pepperl-fuchs:ice1-8iol-s2-g60l-v1d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pepperl+Fuchs

Remediation

  • Fix · CNA rcX RTOS (Hilscher) Fixed in V2.1.14.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-20988
  2. 2026-10-03 Alias added: GHSA-473m-ppf7-95wq

References

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences