TI-2021-08963 Aliases CVE-2021-27477 GHSA-xqpg-rjjg-58q9

Memory corruption in JTEKT Corporation TOYOPUC PLC

LOW 35CWE-119Published 2021-07-01 · Updated 2024-08-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

When JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, and PC10GE receive an invalid frame, the outside area of a receive buffer for FL-net are overwritten. As a result, the PLC CPU detects a system error, and the affected products stop.

Why it matters now

EPSS 0.01125 66th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	JTEKT Corporation TOYOPUC PLC	The following versions of the PLC are affected: PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, PC10GE.	—	No fix listed	CNA

JTEKT Corporation TOYOPUC PLC Vendor— Affected The following versions of the PLC are affected: PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET,PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B,PC10B-P, Nano CPU, PC10P, PC10GE. Fixed in — No fix listed CNA

CPE configurations NVD · 44

CPE	Versions	Role	Vendor
cpe:2.3:o:jtekt:pc10g-cpu_firmware::::::::	before 3.91	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10g-cpu:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:2port-efr_firmware::::::::	before 1.50	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:2port-efr:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_cpu_firmware::::::::	before 3.11	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_cpu:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_ex_firmware::::::::	before 3.11	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_ex:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_ex2_firmware::::::::	before 3.11	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_ex2:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION

cpe:2.3:o:jtekt:pc10g-cpu_firmware:*:*:*:*:*:*:*:* Versions before 3.91 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10g-cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:2port-efr_firmware:*:*:*:*:*:*:*:* Versions before 1.50 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:2port-efr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_cpu_firmware:*:*:*:*:*:*:*:* Versions before 3.11 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_ex_firmware:*:*:*:*:*:*:*:* Versions before 3.11 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_ex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_ex2_firmware:*:*:*:*:*:*:*:* Versions before 3.11 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_ex2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION

Show 34 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:jtekt:plus_efr_firmware::::::::	before 3.11	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_efr:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_efr2_firmware::::::::	before 3.11	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_efr2:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_2p-efr_firmware::::::::	before 3.11	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_2p-efr:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10p-dp_firmware::::::::	before 1.50	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10p-dp:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10p-dp-io_firmware::::::::	before 1.50	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10p-dp-io:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_bus-ex_firmware::::::::	before 2.13	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_bus-ex:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:nano_10gx_firmware::::::::	before 3.00	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:nano_10gx:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:nano_2et_firmware::::::::	before 2.40	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:nano_2et:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10pe_firmware::::::::	before 1.02	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10pe:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10pe-16\/16p_firmware::::::::	before 1.02	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10pe-16\/16p:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10e_firmware::::::::	before 1.02	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10e:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:fl\/et-t-v2h_firmware::::::::	before f2.8_e1.5	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:fl\/et-t-v2h:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10b_firmware::::::::	before 1.11	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10b:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10b-p_firmware::::::::	before 1.11	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10b-p:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:nano_cpu_firmware::::::::	before 2.08	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:nano_cpu:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10p_firmware::::::::	before 1.05	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10p:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10ge_firmware::::::::	before 1.04	Vulnerable	JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10ge:-:::::::*	not specified by NVD	Running on	JTEKT ELECTRONICS CORPORATION

cpe:2.3:o:jtekt:plus_efr_firmware:*:*:*:*:*:*:*:* Versions before 3.11 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_efr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_efr2_firmware:*:*:*:*:*:*:*:* Versions before 3.11 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_efr2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_2p-efr_firmware:*:*:*:*:*:*:*:* Versions before 3.11 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_2p-efr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10p-dp_firmware:*:*:*:*:*:*:*:* Versions before 1.50 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10p-dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10p-dp-io_firmware:*:*:*:*:*:*:*:* Versions before 1.50 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10p-dp-io:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:plus_bus-ex_firmware:*:*:*:*:*:*:*:* Versions before 2.13 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:plus_bus-ex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:nano_10gx_firmware:*:*:*:*:*:*:*:* Versions before 3.00 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:nano_10gx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:nano_2et_firmware:*:*:*:*:*:*:*:* Versions before 2.40 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:nano_2et:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10pe_firmware:*:*:*:*:*:*:*:* Versions before 1.02 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10pe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10pe-16\/16p_firmware:*:*:*:*:*:*:*:* Versions before 1.02 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10pe-16\/16p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10e_firmware:*:*:*:*:*:*:*:* Versions before 1.02 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:fl\/et-t-v2h_firmware:*:*:*:*:*:*:*:* Versions before f2.8_e1.5 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:fl\/et-t-v2h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10b_firmware:*:*:*:*:*:*:*:* Versions before 1.11 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10b-p_firmware:*:*:*:*:*:*:*:* Versions before 1.11 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10b-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:nano_cpu_firmware:*:*:*:*:*:*:*:* Versions before 2.08 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:nano_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10p_firmware:*:*:*:*:*:*:*:* Versions before 1.05 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:o:jtekt:pc10ge_firmware:*:*:*:*:*:*:*:* Versions before 1.04 Vulnerable ·JTEKT ELECTRONICS CORPORATION
cpe:2.3:h:jtekt:pc10ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·JTEKT ELECTRONICS CORPORATION

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2021-27477
2026-10-03 Alias added: GHSA-xqpg-rjjg-58q9

References

Advisory 1

https://us-cert.cisa.gov/ics/advisories/icsa-21-180-04

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences