title: Hilscher: Denial of Service vulnerability in PROFINET IO Device
description: A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.
problem types: CWE-787 Out-of-bounds Write
affected:
{
product: PROFINET IO Device
vendor: Hilscher
versions:
lessThan: V3.14.0.7, status: affected, version: V3, versionType: custom
}
{
product: PCV/PXV/PGV
vendor: Pepper+Fuchs
versions:
lessThanOrEqual: V2.0.0, status: affected, version: PGV100-F200A-B17-V1D, PGV150I-F200A-B17-V1D, PGV100-F200-B17-V1D-7477, versionType: custom
lessThanOrEqual: V4.2.0, status: affected, version: PXV100-F200-B17-V1D, PXV100-F200-B17-V1D-3636, versionType: custom
lessThanOrEqual: V3.2.3, status: affected, version: PCV80-F200-B17-V1D, PCV100-F200-B17-V1D, PCV50-F200-B17-V1D, PCV100-F200-B17-V1D-6011-6997, versionType: custom
lessThanOrEqual: V3.2.5, status: affected, version: PCV100-F200-B17-V1D-6011, PCV100-F200-B17-V1D-6011-8203, versionType: custom
}
{
product: PXV/PGV B28 Profisafe
vendor: Pepper+Fuchs
versions:
lessThanOrEqual: V1.0.3, status: affected, version: PXV100A-F200-B28-V1D, PXV100A-F200-B28-V1D-6011, PGV100A-F200-B28-V1D, PGV100A-F200A-B28-V1D, versionType: custom
lessThanOrEqual: V2.1.1, status: affected, version: PGV100AQ-F200A-B28-V1D, PGV100AQ-F200-B28-V1D, PXV100AQ-F200-B28-V1D, PXV100AQ-F200-B28-V1D-6011, versionType: custom
}
{
product: OHV
vendor: Pepper+Fuchs
versions:
lessThanOrEqual: V1.1.0, status: affected, version: OHV-F230-B17, versionType: custom
}
{
product: OIT
vendor: Pepper+Fuchs
versions:
lessThanOrEqual: V1.3.4, status: affected, version: OIT500-F113-B17-CB, versionType: custom
}
{
product: PHA
vendor: Pepper+Fuchs
versions:
lessThanOrEqual: V3.1.5, status: affected, version: PHA300-F200-B17-V1D, PHA400-F200-B17-V1D, PHA300-F200A-B17-V1D, PHA300-F200-B17-T-V1D, PHA200-F200A-B17-V1D, PHA200-F200-B17-V1D, PHA400-F200A-B17-V1D, PHA300-F200A-B17-T-V1D, PHA600-F200A-B17-V1D, PHA500-F200-B17-V1D, PHA500-F200A-B17-V1D, PHA600-F200-B17-V1D, PHA150-F200A-B17-V1D, PHA200-F200A-B17-T-V1D, PHA150-F200-B17-V1D, PHA800-F200-B17-V1D, PHA400-F200A-B17-T-V1D, PHA500-F200A-B17-T-V1D, PHA700-F200-B17-V1D, versionType: custom
}
{
product: WCS
vendor: Pepper+Fuchs
versions:
lessThanOrEqual: V3.0.0, status: affected, version: WCS3B-LS610, WCS3B-LS610H, WCS3B-LS610D, WCS3B-LS610DH, WCS3B-LS610H-OM, WCS3B-LS610DH-OM, WCS3B-LS610D-OM, CS3B-LS610-OM, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]