What’s Vulnerable › Vulnerabilities
CVE-2021-32998
- Severity: high (CVSS 7.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-01-10 · updated 2026-06-17
- Weakness: CWE-787
Description
The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required.
Affected products
- FANUC R-30Ia Firmware: 7.20, 7.30, 7.40, 7.43, 7.50, 7.63 (+1)
- FANUC R-30Ia Mate Firmware: 7.20, 7.30, 7.40, 7.43, 7.50, 7.63 (+1)
- FANUC R-30Ib Compact Firmware: 8.10, 8.13, 8.20, 8.23, 8.26, 8.30 (+2)
- FANUC R-30Ib Compact Plus Firmware: 9.10, 9.13, 9.16, 9.30, 9.36, 9.40
- FANUC R-30Ib Firmware: 8.10, 8.13, 8.20, 8.23, 8.26, 8.30 (+2)
- FANUC R-30Ib Mate Firmware: 8.10, 8.13, 8.20, 8.23, 8.26, 8.30 (+2)
- FANUC R-30Ib Mate Plus Firmware: 9.10, 9.13, 9.16, 9.30, 9.36, 9.40
- FANUC R-30Ib Mini Plus Firmware: 9.10, 9.13, 9.16, 9.30, 9.36, 9.40
- FANUC R-30Ib Plus Firmware: 9.10, 9.13, 9.16, 9.30, 9.36, 9.40
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-243-02
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-243-02
Get alerted when CVE-2021-32998 or the next vulnerability affects your stack