Skip to content
Fencer Vulns
high 7.5

CVE-2021-27458 json

If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE T…

published 2021-04-19 5 y ago modified 2026-06-17 4 mo ago also EUVD-2021-14212

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.1%
EPSS 1.1% chance of exploitation in 30 days, percentile 66%
public exploits
0
none known

Summary

If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All versions, PC10B-P TCC-6373: All versions, PC10B TCC-1021: All versions, PC10B-E/C TCU-6521: All versions, PC10E TCC-4737: All versions; TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions, Plus EX TCU-6741: All versions, Plus EX2 TCU-6858: All versions, Plus EFR TCU-6743: All versions, Plus EFR2 TCU-6859: All versions, Plus 2P-EFR TCU-6929: All versions, Plus BUS-EX TCU-6900: All versions; TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions, 2PORT-EFR THU-6404: All versions) are left in an open state by an attacker, Ethernet communications cannot be established with other devices, depending on the settings of the link parameters.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-21-103-03 updated cvss 7.5

JTEKT TOYOPUC products

  • JTEKT Corporation 2PORT-EFR THU-6404 JTEKT Corporation FL/ET-T-V2H THU-6289 JTEKT Corporation PC10B TCC-1021 JTEKT Corporation PC10B-E/C TCU-6521 JTEKT Corporation PC10B-P TCC-6373 JTEKT Corporation PC10E TCC-4737
    +12 more products
    JTEKT Corporation PC10G-CPU TCC-6353 JTEKT Corporation PC10GE TCC-6464 JTEKT Corporation PC10P TCC-6372 JTEKT Corporation PC10P-DP TCC-6726 JTEKT Corporation PC10P-DP-IO TCC-6752 JTEKT Corporation Plus 2P-EFR TCU-6929 JTEKT Corporation Plus BUS-EX TCU-6900 JTEKT Corporation Plus CPU TCC-6740 JTEKT Corporation Plus EFR TCU-6743 JTEKT Corporation Plus EFR2 TCU-6859 JTEKT Corporation Plus EX TCU-6741 JTEKT Corporation Plus EX2 TCU-6858
    affected: mitigation “JTEKT Corporation recommends users to use the following workaround:”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

1.15% chance of exploitation in the next 30 days, higher than 66% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

  • n/a JTEKT Corporation TOYOPUC products

Classification

Weakness
  • CWE-404 Improper Resource Shutdown or Release

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.