If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10…
Priority LOW 35CWE-404Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-404.
Summary
If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All versions, PC10B-P TCC-6373: All versions, PC10B TCC-1021: All versions, PC10B-E/C TCU-6521: All versions, PC10E TCC-4737: All versions; TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions, Plus EX TCU-6741: All versions, Plus EX2 TCU-6858: All versions, Plus EFR TCU-6743: All versions, Plus EFR2 TCU-6859: All versions, Plus 2P-EFR TCU-6929: All versions, Plus BUS-EX TCU-6900: All versions; TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions, 2PORT-EFR THU-6404: All versions) are left in an open state by an attacker, Ethernet communications cannot be established with other devices, depending on the settings of the link parameters.
Why it matters now
EPSS 0.01105 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | JTEKT Corporation TOYOPUC products | TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All versions, PC10B-P TCC-6373: All versions, PC10B TCC-1021: All versions, PC10B-E/C TCU-6521: All versions, PC10E TCC-4737: All versions; TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions, Plus EX TCU-6741: All versions, Plus EX2 TCU-6858: All versions, Plus EFR TCU-6743: All versions, Plus EFR2 TCU-6859: All versions, Plus 2P-EFR TCU-6929: All versions, Plus BUS-EX TCU-6900: All versions; TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions, 2PORT-EFR THU-6404: All versions | — | No fix listed | CNA |
- JTEKT Corporation TOYOPUC products Vendor— Affected TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All versions, PC10B-P TCC-6373: All versions, PC10B TCC-1021: All versions, PC10B-E/C TCU-6521: All versions, PC10E TCC-4737: All versions; TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions, Plus EX TCU-6741: All versions, Plus EX2 TCU-6858: All versions, Plus EFR TCU-6743: All versions, Plus EFR2 TCU-6859: All versions, Plus 2P-EFR TCU-6929: All versions, Plus BUS-EX TCU-6900: All versions; TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions, 2PORT-EFR THU-6404: All versions Fixed in — No fix listed CNA
CPE configurations NVD · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:jtekt:pc10g-cpu_tcc-6353_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:pc10g-cpu_tcc-6353:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:pc10ge_tcc-6464_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:pc10ge_tcc-6464:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:pc10p_tcc-6372_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:pc10p_tcc-6372:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:pc10p-dp_tcc-6726_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:pc10p-dp_tcc-6726:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:pc10p-dp-io_tcc-6752_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:pc10p-dp-io_tcc-6752:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
- cpe:2.3:o:jtekt:pc10g-cpu_tcc-6353_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:pc10g-cpu_tcc-6353:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:pc10ge_tcc-6464_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:pc10ge_tcc-6464:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:pc10p_tcc-6372_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:pc10p_tcc-6372:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:pc10p-dp_tcc-6726_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:pc10p-dp_tcc-6726:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:pc10p-dp-io_tcc-6752_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:pc10p-dp-io_tcc-6752:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:jtekt:pc10b-p_tcc-6373_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:pc10b-p_tcc-6373:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:pc10b_tcc-1021_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:pc10b_tcc-1021:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:pc10b-e\/c_tcu-6521_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:pc10b-e\/c_tcu-6521:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:pc10e_tcc-4737_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:pc10e_tcc-4737:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:plus_cpu_tcc-6740_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:plus_cpu_tcc-6740:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:plus_ex_tcu-6741_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:plus_ex_tcu-6741:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:plus_ex2_tcu-6858_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:plus_ex2_tcu-6858:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:plus_efr_tcu-6743_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:plus_efr_tcu-6743:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:plus_efr2_tcu-6859_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:plus_efr2_tcu-6859:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:plus_2p-efr_tcu-6929_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:plus_2p-efr_tcu-6929:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:plus_bus-ex_tcu-6900_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:plus_bus-ex_tcu-6900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:fl\/et-t-v2h_thu-6289_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:fl\/et-t-v2h_thu-6289:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:o:jtekt:2port-efr_thu-6404_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | JTEKT ELECTRONICS CORPORATION |
| cpe:2.3:h:jtekt:2port-efr_thu-6404:-:*:*:*:*:*:*:* | not specified by NVD | Running on | JTEKT ELECTRONICS CORPORATION |
- cpe:2.3:o:jtekt:pc10b-p_tcc-6373_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:pc10b-p_tcc-6373:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:pc10b_tcc-1021_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:pc10b_tcc-1021:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:pc10b-e\/c_tcu-6521_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:pc10b-e\/c_tcu-6521:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:pc10e_tcc-4737_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:pc10e_tcc-4737:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:plus_cpu_tcc-6740_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:plus_cpu_tcc-6740:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:plus_ex_tcu-6741_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:plus_ex_tcu-6741:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:plus_ex2_tcu-6858_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:plus_ex2_tcu-6858:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:plus_efr_tcu-6743_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:plus_efr_tcu-6743:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:plus_efr2_tcu-6859_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:plus_efr2_tcu-6859:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:plus_2p-efr_tcu-6929_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:plus_2p-efr_tcu-6929:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:plus_bus-ex_tcu-6900_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:plus_bus-ex_tcu-6900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:fl\/et-t-v2h_thu-6289_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:fl\/et-t-v2h_thu-6289:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:o:jtekt:2port-efr_thu-6404_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·JTEKT ELECTRONICS CORPORATION
- cpe:2.3:h:jtekt:2port-efr_thu-6404:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-27458
- 2026-10-03 Alias added: GHSA-qmc4-q85x-pjh3
References
More JTEKT ELECTRONICS CORPORATION 2port-efr Thu-6404 Firmware vulnerabilities
- TI-2021-12618 Resource allocation without limits in JTEKT Corporation TOYOPUC products CVSS 3.1MEDIUM 4.3
Sources
- CVE-2021-27458 · CVE Program
- CVE-2021-27458 · NVD
- FIRST EPSS
- GHSA-qmc4-q85x-pjh3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences