8.8

CVE-2021-32998

The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fanuc ≫ R-30ia Firmware Version 7.20
   Fanuc ≫ R-30ia Version -
Fanuc ≫ R-30ia Firmware Version 7.30
   Fanuc ≫ R-30ia Version -
Fanuc ≫ R-30ia Firmware Version 7.40
   Fanuc ≫ R-30ia Version -
Fanuc ≫ R-30ia Firmware Version 7.43
   Fanuc ≫ R-30ia Version -
Fanuc ≫ R-30ia Firmware Version 7.50
   Fanuc ≫ R-30ia Version -
Fanuc ≫ R-30ia Firmware Version 7.63
   Fanuc ≫ R-30ia Version -
Fanuc ≫ R-30ia Firmware Version 7.70
   Fanuc ≫ R-30ia Version -
Fanuc ≫ R-30ia Mate Firmware Version 7.20
   Fanuc ≫ R-30ia Mate Version -
Fanuc ≫ R-30ia Mate Firmware Version 7.30
   Fanuc ≫ R-30ia Mate Version -
Fanuc ≫ R-30ia Mate Firmware Version 7.40
   Fanuc ≫ R-30ia Mate Version -
Fanuc ≫ R-30ia Mate Firmware Version 7.43
   Fanuc ≫ R-30ia Mate Version -
Fanuc ≫ R-30ia Mate Firmware Version 7.50
   Fanuc ≫ R-30ia Mate Version -
Fanuc ≫ R-30ia Mate Firmware Version 7.63
   Fanuc ≫ R-30ia Mate Version -
Fanuc ≫ R-30ia Mate Firmware Version 7.70
   Fanuc ≫ R-30ia Mate Version -
Fanuc ≫ R-30ib Mate Firmware Version 8.10
   Fanuc ≫ R-30ib Mate Version -
Fanuc ≫ R-30ib Mate Firmware Version 8.13
   Fanuc ≫ R-30ib Mate Version -
Fanuc ≫ R-30ib Mate Firmware Version 8.20
   Fanuc ≫ R-30ib Mate Version -
Fanuc ≫ R-30ib Mate Firmware Version 8.23
   Fanuc ≫ R-30ib Mate Version -
Fanuc ≫ R-30ib Mate Firmware Version 8.26
   Fanuc ≫ R-30ib Mate Version -
Fanuc ≫ R-30ib Mate Firmware Version 8.30
   Fanuc ≫ R-30ib Mate Version -
Fanuc ≫ R-30ib Mate Firmware Version 8.33
   Fanuc ≫ R-30ib Mate Version -
Fanuc ≫ R-30ib Mate Firmware Version 8.36
   Fanuc ≫ R-30ib Mate Version -
Fanuc ≫ R-30ib Compact Firmware Version 8.10
   Fanuc ≫ R-30ib Compact Version -
Fanuc ≫ R-30ib Compact Firmware Version 8.13
   Fanuc ≫ R-30ib Compact Version -
Fanuc ≫ R-30ib Compact Firmware Version 8.20
   Fanuc ≫ R-30ib Compact Version -
Fanuc ≫ R-30ib Compact Firmware Version 8.23
   Fanuc ≫ R-30ib Compact Version -
Fanuc ≫ R-30ib Compact Firmware Version 8.26
   Fanuc ≫ R-30ib Compact Version -
Fanuc ≫ R-30ib Compact Firmware Version 8.30
   Fanuc ≫ R-30ib Compact Version -
Fanuc ≫ R-30ib Compact Firmware Version 8.33
   Fanuc ≫ R-30ib Compact Version -
Fanuc ≫ R-30ib Compact Firmware Version 8.36
   Fanuc ≫ R-30ib Compact Version -
Fanuc ≫ R-30ib Firmware Version 8.10
   Fanuc ≫ R-30ib Version -
Fanuc ≫ R-30ib Firmware Version 8.13
   Fanuc ≫ R-30ib Version -
Fanuc ≫ R-30ib Firmware Version 8.20
   Fanuc ≫ R-30ib Version -
Fanuc ≫ R-30ib Firmware Version 8.23
   Fanuc ≫ R-30ib Version -
Fanuc ≫ R-30ib Firmware Version 8.26
   Fanuc ≫ R-30ib Version -
Fanuc ≫ R-30ib Firmware Version 8.30
   Fanuc ≫ R-30ib Version -
Fanuc ≫ R-30ib Firmware Version 8.33
   Fanuc ≫ R-30ib Version -
Fanuc ≫ R-30ib Firmware Version 8.36
   Fanuc ≫ R-30ib Version -
Fanuc ≫ R-30ib Mate Plus Firmware Version 9.10
   Fanuc ≫ R-30ib Mate Plus Version -
Fanuc ≫ R-30ib Mate Plus Firmware Version 9.13
   Fanuc ≫ R-30ib Mate Plus Version -
Fanuc ≫ R-30ib Mate Plus Firmware Version 9.16
   Fanuc ≫ R-30ib Mate Plus Version -
Fanuc ≫ R-30ib Mate Plus Firmware Version 9.30
   Fanuc ≫ R-30ib Mate Plus Version -
Fanuc ≫ R-30ib Mate Plus Firmware Version 9.36
   Fanuc ≫ R-30ib Mate Plus Version -
Fanuc ≫ R-30ib Mate Plus Firmware Version 9.40
   Fanuc ≫ R-30ib Mate Plus Version -
Fanuc ≫ R-30ib Compact Plus Firmware Version 9.10
   Fanuc ≫ R-30ib Compact Plus Version -
Fanuc ≫ R-30ib Compact Plus Firmware Version 9.13
   Fanuc ≫ R-30ib Compact Plus Version -
Fanuc ≫ R-30ib Compact Plus Firmware Version 9.16
   Fanuc ≫ R-30ib Compact Plus Version -
Fanuc ≫ R-30ib Compact Plus Firmware Version 9.30
   Fanuc ≫ R-30ib Compact Plus Version -
Fanuc ≫ R-30ib Compact Plus Firmware Version 9.36
   Fanuc ≫ R-30ib Compact Plus Version -
Fanuc ≫ R-30ib Compact Plus Firmware Version 9.40
   Fanuc ≫ R-30ib Compact Plus Version -
Fanuc ≫ R-30ib Mini Plus Firmware Version 9.10
   Fanuc ≫ R-30ib Mini Plus Version -
Fanuc ≫ R-30ib Mini Plus Firmware Version 9.13
   Fanuc ≫ R-30ib Mini Plus Version -
Fanuc ≫ R-30ib Mini Plus Firmware Version 9.16
   Fanuc ≫ R-30ib Mini Plus Version -
Fanuc ≫ R-30ib Mini Plus Firmware Version 9.30
   Fanuc ≫ R-30ib Mini Plus Version -
Fanuc ≫ R-30ib Mini Plus Firmware Version 9.36
   Fanuc ≫ R-30ib Mini Plus Version -
Fanuc ≫ R-30ib Mini Plus Firmware Version 9.40
   Fanuc ≫ R-30ib Mini Plus Version -
Fanuc ≫ R-30ib Plus Firmware Version 9.10
   Fanuc ≫ R-30ib Plus Version -
Fanuc ≫ R-30ib Plus Firmware Version 9.13
   Fanuc ≫ R-30ib Plus Version -
Fanuc ≫ R-30ib Plus Firmware Version 9.16
   Fanuc ≫ R-30ib Plus Version -
Fanuc ≫ R-30ib Plus Firmware Version 9.30
   Fanuc ≫ R-30ib Plus Version -
Fanuc ≫ R-30ib Plus Firmware Version 9.36
   Fanuc ≫ R-30ib Plus Version -
Fanuc ≫ R-30ib Plus Firmware Version 9.40
   Fanuc ≫ R-30ib Plus Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.18% 0.637
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.4 2.2 5.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
NIST 8.8 8.6 9.2
AV:N/AC:M/Au:N/C:N/I:C/A:C
CISA-ADP 7.4 2.2 5.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-243-02
Third Party Advisory
US Government Resource