Skip to content
fr Sign in
Not rated

CVE-2021-43083 Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow…

Description

Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a mallicious device which could send a response with invalid content. Currently we consider the probability of this being exploited as quite minimal, however this could change in the future, especially with the industrial networks growing more and more together.

Affected products and versions

Product Affected versions Fixed in
Apache PLC4X 0.9 earliest → 0.9.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apache PLC4X

The 5 CVEs of Apache PLC4X →
CVE-2026-102511 Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X… 8.5 High CVE-2026-102510 Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size… 8.7 High CVE-2026-102509 Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the… 8.7 High CVE-2026-102508 Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache… 9.2 Critical
Track this CVE