MEDIUM🇵🇱 Wersja polska

CVE-2015-6482

CVSS 5.0v2.0pub. 2015-10-18upd. 2026-05-06

Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted request.

CVSS Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P

  • 3s Software Codesys Runtime System

    APP
    3S-Software
    ≤ 2.3.9.47
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2018-5440CRITICAL9.8PL ✓same product

Stack-based Buffer Overflow w CODESYS Web Server — możliwe RCE

CVE-2012-6068CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w CODESYS Runtime System umożliwia zdalne wykonanie poleceń

CVE-2012-6069CRITICAL10.0PL ✓same product

Path Traversal w CoDeSys Runtime Toolkit — nieograniczony dostęp do plików

CVE-2014-0760HIGH9.3same product

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and ...

CVE-2014-0769HIGH9.3same product

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and S...