PT-2022-10183 · Fanuc · Fanuc R-30Ib Series Controllers

Tri Quach · Published 2022-01-07 · Updated 2022-03-21 · CVE-2021-32998

Positive Technologies (AI Summary)

CVSS v2.0

8.8

High

Base vector

AV:N/AC:M/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions FANUC R-30iA series controllers (affected versions not specified) FANUC R-30iB series controllers (affected versions not specified)

Description The issue allows an attacker to potentially execute arbitrary code remotely due to an out-of-bounds write.

Recommendations For FANUC R-30iA series controllers, INIT START/restore from backup is required. For FANUC R-30iB series controllers, INIT START/restore from backup is required.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-32998

Affected Products

Fanuc R-30Ib Series Controllers

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-32998 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32998 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsa-21-243-02 · Note