{"cve":"CVE-2021-27458","nvd":{"published":"2021-04-19T22:15:12.967","modified":"2026-06-17T03:44:54.073","status":"Modified","description":"If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All versions, PC10B-P TCC-6373: All versions, PC10B TCC-1021: All versions, PC10B-E/C TCU-6521: All versions, PC10E TCC-4737: All versions; TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions, Plus EX TCU-6741: All versions, Plus EX2 TCU-6858: All versions, Plus EFR TCU-6743: All versions, Plus EFR2 TCU-6859: All versions, Plus 2P-EFR TCU-6929: All versions, Plus BUS-EX TCU-6900: All versions; TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions, 2PORT-EFR THU-6404: All versions) are left in an open state by an attacker, Ethernet communications cannot be established with other devices, depending on the settings of the link parameters.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5},"cwes":["CWE-404"],"references":["https://us-cert.cisa.gov/ics/advisories/icsa-21-103-03","https://us-cert.cisa.gov/ics/advisories/icsa-21-103-03"],"products":["jtekt:2port-efr_thu-6404_firmware","jtekt:fl\\/et-t-v2h_thu-6289_firmware","jtekt:pc10b-e\\/c_tcu-6521_firmware","jtekt:pc10b-p_tcc-6373_firmware","jtekt:pc10b_tcc-1021_firmware","jtekt:pc10e_tcc-4737_firmware","jtekt:pc10g-cpu_tcc-6353_firmware","jtekt:pc10ge_tcc-6464_firmware","jtekt:pc10p-dp-io_tcc-6752_firmware","jtekt:pc10p-dp_tcc-6726_firmware","jtekt:pc10p_tcc-6372_firmware","jtekt:plus_2p-efr_tcu-6929_firmware","jtekt:plus_bus-ex_tcu-6900_firmware","jtekt:plus_cpu_tcc-6740_firmware","jtekt:plus_efr2_tcu-6859_firmware","jtekt:plus_efr_tcu-6743_firmware","jtekt:plus_ex2_tcu-6858_firmware","jtekt:plus_ex_tcu-6741_firmware"],"source":"nvd","synced_at":"2026-10-19T21:17:01.373894544+00:00"},"epss":{"cve":"CVE-2021-27458","score":0.01105,"percentile":0.65797,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}