What’s Vulnerable › Vulnerabilities

CVE-2021-20986: Hilscher: Denial of Service vulnerability in PROFINET IO Device

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-02-16 · updated 2026-06-17
• Weakness: CWE-787

Description

A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.

Affected products

• Hilscher Profinet Io Device Firmware: from 3.0 before 3.14.0.7 — fixed in 3.14.0.7
• Pepperl-Fuchs Ohv-F230-B17 Firmware: through 1.1.0
• Pepperl-Fuchs Oit500-F113B17-Cb Firmware: through 1.3.4
• Pepperl-Fuchs Pcv100-F200-B17-V1D-6011-6997 Firmware: through 3.2.3
• Pepperl-Fuchs Pcv100-F200-B17-V1D-6011-8203 Firmware: through 3.2.5
• Pepperl-Fuchs Pcv100-F200-B17-V1D-6011 Firmware: through 3.2.5
• Pepperl-Fuchs Pcv100-F200-B17-V1D Firmware: through 3.2.3
• Pepperl-Fuchs Pcv50-F200-B17-V1D Firmware: through 3.2.3
• Pepperl-Fuchs Pcv80-F200-B17-V1D Firmware: through 3.2.3
• Pepperl-Fuchs Pgv100-F200-B17-V1D-7477 Firmware: through 2.0.0
• Pepperl-Fuchs Pgv100-F200A-B17-V1D Firmware: through 2.0.0
• Pepperl-Fuchs Pgv100A-F200-B28-V1D Firmware: through 1.0.3
• Pepperl-Fuchs Pgv100A-F200A-B28-V1D Firmware: through 1.0.3
• Pepperl-Fuchs Pgv100Aq-F200-B28-V1D Firmware: through 2.1.1
• Pepperl-Fuchs Pgv100Aq-F200A-B28-V1D Firmware: through 2.1.1
• Pepperl-Fuchs Pgv150I-F200A-B17-V1D Firmware: through 2.0.0
• Pepperl-Fuchs Pha Firmware: through 3.1.5
• Pepperl-Fuchs Pxv100-F200-B17-V1D-3636 Firmware: through 4.2.0
• Pepperl-Fuchs Pxv100-F200-B17-V1D Firmware: through 4.2.0
• Pepperl-Fuchs Pxv100A-F200-B28-V1D-6011 Firmware: through 1.0.3
• Pepperl-Fuchs Pxv100A-F200-B28-V1D Firmware: through 1.0.3
• Pepperl-Fuchs Pxv100Aq-F200-B28-V1D-6011 Firmware: through 2.1.1
• Pepperl-Fuchs Pxv100Aq-F200-B28-V1D Firmware: through 2.1.1
• Pepperl-Fuchs Wcs Firmware: through 3.0.0

How to fix

Upgrade to a fixed version: Hilscher Profinet Io Device Firmware 3.14.0.7. Check the vendor advisory for mitigations.

References

• https://cert.vde.com/en-us/advisories/vde-2021-006
• https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device
• https://cert.vde.com/en-us/advisories/vde-2021-006
• https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device

Get alerted when CVE-2021-20986 or the next vulnerability affects your stack