CVE-2021-43083

Katalog CVE

CVSS 8.8 · High EPSS 2,0%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada apache plc4x. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a mallicious device which could send a response with invalid content. Currently we consider the probability of this being exploited as quite minimal, however this could change in the future, especially with the industrial networks growing more and more together.

Rincian

Terbit di NVD

19 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-191: Integer Underflow (Wrap or Wraparound)

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 80,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread/jxx6qc84z60xbbhn6vp2s5qf09psrtc7 advisory vendor
• http://www.openwall.com/lists/oss-security/2021/12/20/2 mailing list · advisory pihak ketiga