CVE-2021-43083

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a mallicious device which could send a response with invalid content. Currently we consider the probability of this being exploited as quite minimal, however this could change in the future, especially with the industrial networks growing more and more together.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-191

Affected software

No affected versions have been published.

Timeline

Published: Dec 19, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-430849.8An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter.CVE-2021-430869.8ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a st CVE-2021-43096.1A vulnerability, which was classified as problematic, has been found in 01-Scripts 01ACP. This issue affects some unknown processing. The ma CVE-2021-430909.8An XML External Entity (XXE) vulnerability exists in soa-model before 1.6.4 in the WSDLParser function.CVE-2021-430917.5An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.CVE-2021-430949.8An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via CVE-2021-430977.2A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute CVE-2021-430987.2A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function.CVE-2021-430994.9An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.java, which unzips t CVE-2021-43106.1A vulnerability was found in 01-Scripts 01-Artikelsystem. It has been classified as problematic. Affected is an unknown function of the file CVE-2021-431007.2A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execut CVE-2021-431017.2A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a remote malicious us