Skip to content
Fencer Vulns
medium 4.3

CVE-2021-33011 json

All versions of the afffected TOYOPUC-PC10 Series,TOYOPUC-Plus Series,TOYOPUC-PC3J/PC2J Series, TOYOPUC-Nano Series products may not be abl…

published 2021-09-10 5 y ago modified 2026-06-17 4 mo ago also EUVD-2021-19732

cvss
4.3
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 35%
public exploits
0
none known

Summary

All versions of the afffected TOYOPUC-PC10 Series,TOYOPUC-Plus Series,TOYOPUC-PC3J/PC2J Series, TOYOPUC-Nano Series products may not be able to properly process an ICMP flood, which may allow an attacker to deny Ethernet communications between affected devices.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-21-245-02 updated cvss 4.3

JTEKT TOYOPUC Products

  • JTEKT Corporation 2PORT-EFR THU-6404 JTEKT Corporation EF10 TCU-6982 JTEKT Corporation FL/ET-T-V2H THU-6289 JTEKT Corporation Nano 2ET TUU-6949 JTEKT Corporation Nano 10GX TUC-1157 JTEKT Corporation Nano CPU TUC-6941
    +21 more products
    JTEKT Corporation Nano Safety RS00IP TUU-1086 JTEKT Corporation Nano Safety RS01IP TUU-1087 JTEKT Corporation Nano Safety TUC-1085 JTEKT Corporation PC10B TCC-1021 JTEKT Corporation PC10B-E/C TCU-6521 JTEKT Corporation PC10B-P TCC-6373 JTEKT Corporation PC10E TCC-4637 JTEKT Corporation PC10G-CPU TCC-6353 JTEKT Corporation PC10GE TCC-6464 JTEKT Corporation PC10P TCC-6372 JTEKT Corporation PC10P-DP TCC-6726 JTEKT Corporation PC10P-DP-IO TCC-6752 JTEKT Corporation PC10PE TCC-1101 JTEKT Corporation PC10PE-1616P TCC-1102 JTEKT Corporation Plus 2P-EFR TCU-6929 JTEKT Corporation Plus BUS-EX TCU-6900 JTEKT Corporation Plus CPU TCC-6740 JTEKT Corporation Plus EFR TCU-6743 JTEKT Corporation Plus EFR2 TCU-6859 JTEKT Corporation Plus EX TCU-6741 JTEKT Corporation Plus EX2 TCU-6858
    affected: mitigation “Locate control system networks and remote devices behind firewalls and isolate them from the business network.” us-cert.cisa.gov

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

0.41% chance of exploitation in the next 30 days, higher than 35% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD 2.0 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P

Affected products

  • n/a JTEKT Corporation TOYOPUC products

Classification

Weakness
  • CWE-770 Allocation of Resources Without Limits or Throttling

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.