CVE-2021-32996
10.01.2022, 14:10
The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fanuc | r-30ia_firmware | 7.20 |
| fanuc | r-30ia_firmware | 7.30 |
| fanuc | r-30ia_firmware | 7.40 |
| fanuc | r-30ia_firmware | 7.43 |
| fanuc | r-30ia_firmware | 7.50 |
| fanuc | r-30ia_firmware | 7.63 |
| fanuc | r-30ia_firmware | 7.70 |
| fanuc | r-30ia_mate_firmware | 7.20 |
| fanuc | r-30ia_mate_firmware | 7.30 |
| fanuc | r-30ia_mate_firmware | 7.40 |
| fanuc | r-30ia_mate_firmware | 7.43 |
| fanuc | r-30ia_mate_firmware | 7.50 |
| fanuc | r-30ia_mate_firmware | 7.63 |
| fanuc | r-30ia_mate_firmware | 7.70 |
| fanuc | r-30ib_mate_firmware | 8.10 |
| fanuc | r-30ib_mate_firmware | 8.13 |
| fanuc | r-30ib_mate_firmware | 8.20 |
| fanuc | r-30ib_mate_firmware | 8.23 |
| fanuc | r-30ib_mate_firmware | 8.26 |
| fanuc | r-30ib_mate_firmware | 8.30 |
| fanuc | r-30ib_mate_firmware | 8.33 |
| fanuc | r-30ib_mate_firmware | 8.36 |
| fanuc | r-30ib_compact_firmware | 8.10 |
| fanuc | r-30ib_compact_firmware | 8.13 |
| fanuc | r-30ib_compact_firmware | 8.20 |
| fanuc | r-30ib_compact_firmware | 8.23 |
| fanuc | r-30ib_compact_firmware | 8.26 |
| fanuc | r-30ib_compact_firmware | 8.30 |
| fanuc | r-30ib_compact_firmware | 8.33 |
| fanuc | r-30ib_compact_firmware | 8.36 |
| fanuc | r-30ib_firmware | 8.10 |
| fanuc | r-30ib_firmware | 8.13 |
| fanuc | r-30ib_firmware | 8.20 |
| fanuc | r-30ib_firmware | 8.23 |
| fanuc | r-30ib_firmware | 8.26 |
| fanuc | r-30ib_firmware | 8.30 |
| fanuc | r-30ib_firmware | 8.33 |
| fanuc | r-30ib_firmware | 8.36 |
| fanuc | r-30ib_mate_plus_firmware | 9.10 |
| fanuc | r-30ib_mate_plus_firmware | 9.13 |
| fanuc | r-30ib_mate_plus_firmware | 9.16 |
| fanuc | r-30ib_mate_plus_firmware | 9.30 |
| fanuc | r-30ib_mate_plus_firmware | 9.36 |
| fanuc | r-30ib_mate_plus_firmware | 9.40 |
| fanuc | r-30ib_compact_plus_firmware | 9.10 |
| fanuc | r-30ib_compact_plus_firmware | 9.13 |
| fanuc | r-30ib_compact_plus_firmware | 9.16 |
| fanuc | r-30ib_compact_plus_firmware | 9.30 |
| fanuc | r-30ib_compact_plus_firmware | 9.36 |
| fanuc | r-30ib_compact_plus_firmware | 9.40 |
| fanuc | r-30ib_mini_plus_firmware | 9.10 |
| fanuc | r-30ib_mini_plus_firmware | 9.13 |
| fanuc | r-30ib_mini_plus_firmware | 9.16 |
| fanuc | r-30ib_mini_plus_firmware | 9.30 |
| fanuc | r-30ib_mini_plus_firmware | 9.36 |
| fanuc | r-30ib_mini_plus_firmware | 9.40 |
| fanuc | r-30ib_plus_firmware | 9.10 |
| fanuc | r-30ib_plus_firmware | 9.13 |
| fanuc | r-30ib_plus_firmware | 9.16 |
| fanuc | r-30ib_plus_firmware | 9.30 |
| fanuc | r-30ib_plus_firmware | 9.36 |
| fanuc | r-30ib_plus_firmware | 9.40 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-192 - Integer Coercion ErrorInteger coercion refers to a set of flaws pertaining to the type casting, extension, or truncation of primitive data types.
- CWE-681 - Incorrect Conversion between Numeric TypesWhen converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.