PT-2021-20018 · Toyota · Toyopuc-Pc3J/Pc2J Series+3

Yenting Lee · Published 2021-09-10 · Updated 2021-09-24 · CVE-2021-33011

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions TOYOPUC-PC10 Series (affected versions not specified) TOYOPUC-Plus Series (affected versions not specified) TOYOPUC-PC3J/PC2J Series (affected versions not specified) TOYOPUC-Nano Series (affected versions not specified)

Description The affected products may not be able to properly process an ICMP flood, which may allow an attacker to deny Ethernet communications between affected devices.

Recommendations For TOYOPUC-PC10 Series, consider implementing network traffic filtering to minimize the risk of ICMP flood attacks until a patch is available. For TOYOPUC-Plus Series, restrict access to the Ethernet network to minimize the risk of exploitation. For TOYOPUC-PC3J/PC2J Series, consider disabling ICMP protocol support as a temporary workaround until a patch is available. For TOYOPUC-Nano Series, avoid using the affected devices in networks that are exposed to potential ICMP flood attacks until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2021-33011

Affected Products

Toyopuc-Nano Series

Toyopuc-Pc10 Series

Toyopuc-Pc3J/Pc2J Series

Toyopuc-Plus Series

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-33011 · Security Note
• https://t.me/cvenotify/21369 · Telegram Post
• https://t.me/cibsecurity/28661 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-21-245-02 · Note