The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-21-243-02 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
Configuration 8 (hide)
| AND |
|
Configuration 9 (hide)
| AND |
|
History
21 Mar 2022, 17:58
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 8.8
v3 : 7.4 |
13 Jan 2022, 20:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.23:*:*:*:*:*:*:* cpe:2.3:h:fanuc:r-30ib_mini_plus:-:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.36:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.13:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.30:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.36:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.13:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_firmware:7.63:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.30:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_firmware:8.30:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.63:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_firmware:7.20:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.40:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.36:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_firmware:8.23:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.13:*:*:*:*:*:*:* cpe:2.3:h:fanuc:r-30ib_mate_plus:-:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.26:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.36:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_firmware:8.13:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_firmware:8.26:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.10:*:*:*:*:*:*:* cpe:2.3:h:fanuc:r-30ib_plus:-:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.40:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.16:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.40:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.40:*:*:*:*:*:*:* cpe:2.3:h:fanuc:r-30ib_compact:-:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.30:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.30:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.33:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.16:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.10:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.13:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_firmware:7.50:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.16:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_plus_firmware:9.36:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.20:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.10:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.30:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_firmware:8.33:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.26:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.13:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.30:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.13:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.50:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_firmware:7.43:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_firmware:7.30:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.40:*:*:*:*:*:*:* cpe:2.3:h:fanuc:r-30ib_mate:-:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.43:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.20:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_plus_firmware:9.10:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.23:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_firmware:8.10:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_firmware:7.70:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_firmware:8.20:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_firmware:7.40:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mini_plus_firmware:9.16:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.36:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.20:*:*:*:*:*:*:* cpe:2.3:h:fanuc:r-30ia:-:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.33:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_firmware:8.36:*:*:*:*:*:*:* cpe:2.3:h:fanuc:r-30ib:-:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_plus_firmware:9.10:*:*:*:*:*:*:* cpe:2.3:h:fanuc:r-30ib_compact_plus:-:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_mate_firmware:8.10:*:*:*:*:*:*:* cpe:2.3:h:fanuc:r-30ia_mate:-:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ib_compact_firmware:8.30:*:*:*:*:*:*:* cpe:2.3:o:fanuc:r-30ia_mate_firmware:7.70:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.cisa.gov/uscert/ics/advisories/icsa-21-243-02 - Third Party Advisory, US Government Resource | |
| First Time |
Fanuc r-30ia Mate Firmware
Fanuc r-30ib Mini Plus Firmware Fanuc r-30ib Compact Plus Fanuc Fanuc r-30ia Fanuc r-30ib Compact Plus Firmware Fanuc r-30ib Fanuc r-30ib Mate Plus Fanuc r-30ib Compact Firmware Fanuc r-30ia Firmware Fanuc r-30ib Mate Firmware Fanuc r-30ib Mini Plus Fanuc r-30ib Mate Fanuc r-30ib Plus Firmware Fanuc r-30ib Firmware Fanuc r-30ib Plus Fanuc r-30ia Mate Fanuc r-30ib Compact Fanuc r-30ib Mate Plus Firmware |
|
| CVSS |
v2 : v3 : |
v2 : 10.0
v3 : 9.8 |
| CWE | CWE-787 |
10 Jan 2022, 14:14
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-10 14:10
Updated : 2023-12-10 14:09
NVD link : CVE-2021-32998
Mitre link : CVE-2021-32998
CVE.ORG link : CVE-2021-32998
JSON object : View
Products Affected
fanuc
- r-30ib_firmware
- r-30ib_compact_firmware
- r-30ib_mate_plus
- r-30ib_compact
- r-30ib_plus
- r-30ib_plus_firmware
- r-30ia_mate
- r-30ia_mate_firmware
- r-30ib
- r-30ib_compact_plus
- r-30ib_mate
- r-30ib_mini_plus
- r-30ib_mini_plus_firmware
- r-30ib_mate_plus_firmware
- r-30ia_firmware
- r-30ia
- r-30ib_compact_plus_firmware
- r-30ib_mate_firmware
CWE
CWE-787
Out-of-bounds Write