RobotRisk / FANUC / 2021-08-31

CISA advisory: buffer overflow / integer coercion vulnerabilities in FANUC robot controllers

S1 · 08/31
2021 · FANUC

Record

Company	FANUC
Category	machinery oem
Type	cyber
Date	08/31 2021
Time of day	not documented
Location	no physical site (recall / fleet-wide / aggregate record)
Severity	S1 (near-miss / disclosed vulnerability)
Scale	FANUC robot controller product line
Confidence	high
Verification	Cited source on file; not independently re-verified
Source	CISA ICS-CERT

What happened

CISA published ICSA-21-243-02 describing vulnerabilities in FANUC robot controllers that could crash the device or, via buffer overflow, potentially allow remote code execution; no known public exploitation, vendor patch/mitigation issued.

FANUC record context

Entries by year and severity

S1S2S3S4S5

By incident type

By severity

FANUC vs machinery oem alternatives

machinery oem context

machinery oem: entries by year

S1S2S3S4S5

machinery oem: failure modes

machinery oem: most entries

cyber context

cyber: by category

cyber: by year

cyber: severity profile

Comparable cyber events in machinery oem

Sev	Date	Company	Event
S1	2026-09	Mitsubishi Electric (Automation)	CISA ICS advisories: 1 affecting robot/controller products
S1	2026-09	FANUC	CISA ICS advisories: 2 affecting robot/controller products
S1	2026-09	ABB	CISA ICS advisories: 2 affecting robot/controller products
S1	2021-07-27	KUKA	CISA advisory: hard-coded credentials in KUKA KR C4 robot controller (CVSS 9.8)
S2	2017-05	ABB	Researchers demonstrate remote hack of ABB IRB140 industrial robot causing unsafe physical movement

Other FANUC entries

Also from Critical Systems Analysis: CSA - functional safety engineering · Company directory · FSTalent - functional safety jobs