Read the docs
TI-2021-12604 Aliases CVE-2021-32996GHSA-6hf5-gqpw-h5ww

Incorrect numeric conversion in FANUC R-30iA, R-30iA Mate

Priority MEDIUM 41CWE-192Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01125 66th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
FANUCR-30iA, R-30iA Matev7 – v7.70—No fix listedCNA
FANUCR-30iB, R-30iB Mate, R-30iB Compactv8 – v8.36—No fix listedCNA
FANUCR-30iB Plus, R-30iB Mate Plus, R-30iB Compact Plus, R-30iB Mini PlusV9 – v9.40—No fix listedCNA
  • R-30iA, R-30iA Mate VendorFANUC Affected v7 – v7.70 Fixed in — No fix listed CNA
  • R-30iB, R-30iB Mate, R-30iB Compact VendorFANUC Affected v8 – v8.36 Fixed in — No fix listed CNA
  • R-30iB Plus, R-30iB Mate Plus, R-30iB Compact Plus, R-30iB Mini Plus VendorFANUC Affected V9 – v9.40 Fixed in — No fix listed CNA

CPE configurations NVD · 71

CPEVersionsRoleVendor
cpe:2.3:o:fanuc:r-30ia_firmware:7.20:*:*:*:*:*:*:*7.20VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_firmware:7.30:*:*:*:*:*:*:*7.30VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_firmware:7.40:*:*:*:*:*:*:*7.40VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_firmware:7.43:*:*:*:*:*:*:*7.43VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_firmware:7.50:*:*:*:*:*:*:*7.50VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_firmware:7.63:*:*:*:*:*:*:*7.63VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_firmware:7.70:*:*:*:*:*:*:*7.70VulnerableFANUC
cpe:2.3:h:fanuc:r-30ia:-:*:*:*:*:*:*:*not specified by NVDRunning onFANUC
cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.20:*:*:*:*:*:*:*7.20VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.30:*:*:*:*:*:*:*7.30VulnerableFANUC
  • cpe:2.3:o:fanuc:r-30ia_firmware:7.20:*:*:*:*:*:*:* Versions 7.20 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_firmware:7.30:*:*:*:*:*:*:* Versions 7.30 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_firmware:7.40:*:*:*:*:*:*:* Versions 7.40 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_firmware:7.43:*:*:*:*:*:*:* Versions 7.43 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_firmware:7.50:*:*:*:*:*:*:* Versions 7.50 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_firmware:7.63:*:*:*:*:*:*:* Versions 7.63 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_firmware:7.70:*:*:*:*:*:*:* Versions 7.70 Vulnerable ·FANUC
  • cpe:2.3:h:fanuc:r-30ia:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.20:*:*:*:*:*:*:* Versions 7.20 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.30:*:*:*:*:*:*:* Versions 7.30 Vulnerable ·FANUC
Show 61 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.40:*:*:*:*:*:*:*7.40VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.43:*:*:*:*:*:*:*7.43VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.50:*:*:*:*:*:*:*7.50VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.63:*:*:*:*:*:*:*7.63VulnerableFANUC
cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.70:*:*:*:*:*:*:*7.70VulnerableFANUC
cpe:2.3:h:fanuc:r-30ia_mate:-:*:*:*:*:*:*:*not specified by NVDRunning onFANUC
cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.10:*:*:*:*:*:*:*8.10VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.13:*:*:*:*:*:*:*8.13VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.20:*:*:*:*:*:*:*8.20VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.23:*:*:*:*:*:*:*8.23VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.26:*:*:*:*:*:*:*8.26VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.30:*:*:*:*:*:*:*8.30VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.33:*:*:*:*:*:*:*8.33VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.36:*:*:*:*:*:*:*8.36VulnerableFANUC
cpe:2.3:h:fanuc:r-30ib_mate:-:*:*:*:*:*:*:*not specified by NVDRunning onFANUC
cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.10:*:*:*:*:*:*:*8.10VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.13:*:*:*:*:*:*:*8.13VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.20:*:*:*:*:*:*:*8.20VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.23:*:*:*:*:*:*:*8.23VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.26:*:*:*:*:*:*:*8.26VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.30:*:*:*:*:*:*:*8.30VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.33:*:*:*:*:*:*:*8.33VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.36:*:*:*:*:*:*:*8.36VulnerableFANUC
cpe:2.3:h:fanuc:r-30ib_compact:-:*:*:*:*:*:*:*not specified by NVDRunning onFANUC
cpe:2.3:o:fanuc:r-30ib_firmware:8.10:*:*:*:*:*:*:*8.10VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_firmware:8.13:*:*:*:*:*:*:*8.13VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_firmware:8.20:*:*:*:*:*:*:*8.20VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_firmware:8.23:*:*:*:*:*:*:*8.23VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_firmware:8.26:*:*:*:*:*:*:*8.26VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_firmware:8.30:*:*:*:*:*:*:*8.30VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_firmware:8.33:*:*:*:*:*:*:*8.33VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_firmware:8.36:*:*:*:*:*:*:*8.36VulnerableFANUC
cpe:2.3:h:fanuc:r-30ib:-:*:*:*:*:*:*:*not specified by NVDRunning onFANUC
cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.10:*:*:*:*:*:*:*9.10VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.13:*:*:*:*:*:*:*9.13VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.16:*:*:*:*:*:*:*9.16VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.30:*:*:*:*:*:*:*9.30VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.36:*:*:*:*:*:*:*9.36VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.40:*:*:*:*:*:*:*9.40VulnerableFANUC
cpe:2.3:h:fanuc:r-30ib_mate_plus:-:*:*:*:*:*:*:*not specified by NVDRunning onFANUC
cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.10:*:*:*:*:*:*:*9.10VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.13:*:*:*:*:*:*:*9.13VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.16:*:*:*:*:*:*:*9.16VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.30:*:*:*:*:*:*:*9.30VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.36:*:*:*:*:*:*:*9.36VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.40:*:*:*:*:*:*:*9.40VulnerableFANUC
cpe:2.3:h:fanuc:r-30ib_compact_plus:-:*:*:*:*:*:*:*not specified by NVDRunning onFANUC
cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.10:*:*:*:*:*:*:*9.10VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.13:*:*:*:*:*:*:*9.13VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.16:*:*:*:*:*:*:*9.16VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.30:*:*:*:*:*:*:*9.30VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.36:*:*:*:*:*:*:*9.36VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.40:*:*:*:*:*:*:*9.40VulnerableFANUC
cpe:2.3:h:fanuc:r-30ib_mini_plus:-:*:*:*:*:*:*:*not specified by NVDRunning onFANUC
cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.10:*:*:*:*:*:*:*9.10VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.13:*:*:*:*:*:*:*9.13VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.16:*:*:*:*:*:*:*9.16VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.30:*:*:*:*:*:*:*9.30VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.36:*:*:*:*:*:*:*9.36VulnerableFANUC
cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.40:*:*:*:*:*:*:*9.40VulnerableFANUC
cpe:2.3:h:fanuc:r-30ib_plus:-:*:*:*:*:*:*:*not specified by NVDRunning onFANUC
  • cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.40:*:*:*:*:*:*:* Versions 7.40 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.43:*:*:*:*:*:*:* Versions 7.43 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.50:*:*:*:*:*:*:* Versions 7.50 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.63:*:*:*:*:*:*:* Versions 7.63 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.70:*:*:*:*:*:*:* Versions 7.70 Vulnerable ·FANUC
  • cpe:2.3:h:fanuc:r-30ia_mate:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.10:*:*:*:*:*:*:* Versions 8.10 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.13:*:*:*:*:*:*:* Versions 8.13 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.20:*:*:*:*:*:*:* Versions 8.20 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.23:*:*:*:*:*:*:* Versions 8.23 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.26:*:*:*:*:*:*:* Versions 8.26 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.30:*:*:*:*:*:*:* Versions 8.30 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.33:*:*:*:*:*:*:* Versions 8.33 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.36:*:*:*:*:*:*:* Versions 8.36 Vulnerable ·FANUC
  • cpe:2.3:h:fanuc:r-30ib_mate:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.10:*:*:*:*:*:*:* Versions 8.10 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.13:*:*:*:*:*:*:* Versions 8.13 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.20:*:*:*:*:*:*:* Versions 8.20 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.23:*:*:*:*:*:*:* Versions 8.23 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.26:*:*:*:*:*:*:* Versions 8.26 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.30:*:*:*:*:*:*:* Versions 8.30 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.33:*:*:*:*:*:*:* Versions 8.33 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.36:*:*:*:*:*:*:* Versions 8.36 Vulnerable ·FANUC
  • cpe:2.3:h:fanuc:r-30ib_compact:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_firmware:8.10:*:*:*:*:*:*:* Versions 8.10 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_firmware:8.13:*:*:*:*:*:*:* Versions 8.13 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_firmware:8.20:*:*:*:*:*:*:* Versions 8.20 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_firmware:8.23:*:*:*:*:*:*:* Versions 8.23 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_firmware:8.26:*:*:*:*:*:*:* Versions 8.26 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_firmware:8.30:*:*:*:*:*:*:* Versions 8.30 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_firmware:8.33:*:*:*:*:*:*:* Versions 8.33 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_firmware:8.36:*:*:*:*:*:*:* Versions 8.36 Vulnerable ·FANUC
  • cpe:2.3:h:fanuc:r-30ib:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.13:*:*:*:*:*:*:* Versions 9.13 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.16:*:*:*:*:*:*:* Versions 9.16 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.30:*:*:*:*:*:*:* Versions 9.30 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.36:*:*:*:*:*:*:* Versions 9.36 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.40:*:*:*:*:*:*:* Versions 9.40 Vulnerable ·FANUC
  • cpe:2.3:h:fanuc:r-30ib_mate_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.13:*:*:*:*:*:*:* Versions 9.13 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.16:*:*:*:*:*:*:* Versions 9.16 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.30:*:*:*:*:*:*:* Versions 9.30 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.36:*:*:*:*:*:*:* Versions 9.36 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.40:*:*:*:*:*:*:* Versions 9.40 Vulnerable ·FANUC
  • cpe:2.3:h:fanuc:r-30ib_compact_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.13:*:*:*:*:*:*:* Versions 9.13 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.16:*:*:*:*:*:*:* Versions 9.16 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.30:*:*:*:*:*:*:* Versions 9.30 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.36:*:*:*:*:*:*:* Versions 9.36 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.40:*:*:*:*:*:*:* Versions 9.40 Vulnerable ·FANUC
  • cpe:2.3:h:fanuc:r-30ib_mini_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.13:*:*:*:*:*:*:* Versions 9.13 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.16:*:*:*:*:*:*:* Versions 9.16 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.30:*:*:*:*:*:*:* Versions 9.30 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.36:*:*:*:*:*:*:* Versions 9.36 Vulnerable ·FANUC
  • cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.40:*:*:*:*:*:*:* Versions 9.40 Vulnerable ·FANUC
  • cpe:2.3:h:fanuc:r-30ib_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·FANUC

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-32996
  2. 2026-10-03 Alias added: GHSA-6hf5-gqpw-h5ww

References

Advisory 1

  • TI-2021-12606 Out-of-bounds write in FANUC R-30iA, R-30iA Mate CVSS 3.1HIGH 7.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences