CRITICAL🇵🇱 Wersja polska

CVE-2018-5440

CVSS 9.8v3.1pub. 2018-02-15upd. 2024-11-21

A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request may cause a buffer overflow and could therefore execute arbitrary code on the web server or lead to a denial-of-service condition due to a crash in the web server.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • 3s Software Codesys Runtime System

    APP
    3S-Software
    < 1.1.9.19

  • 3s Software Codesys Web Server

    APP
    3S-Software
    2.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2012-6068CRITICAL9.8ten sam produkt

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows re...

CVE-2012-6069CRITICAL10.0ten sam produkt

The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an ...

CVE-2014-0760HIGH9.3ten sam produkt

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and ...

CVE-2014-0769HIGH9.3ten sam produkt

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and S...

CVE-2015-6482MEDIUM5.0ten sam produkt

Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial ...