CRITICAL🇵🇱 Wersja polska

CVE-2019-13548

CVSS 9.8v3.1pub. 2019-09-13upd. 2024-11-21

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Codesys Control For Beaglebone
APP
Codesys
< 3.5.14.10
Codesys Control For Empc A\/imx6
APP
Codesys
< 3.5.14.10
Codesys Control For Iot2000
APP
Codesys
< 3.5.14.10
Codesys Control For Linux
APP
Codesys
< 3.5.14.10
Codesys Control For Pfc100
APP
Codesys
< 3.5.14.10
Codesys Control For Pfc200
APP
Codesys
< 3.5.14.10
Codesys Control For Raspberry Pi
APP
Codesys
< 3.5.14.10
Codesys Control Rte
APP
Codesys
3.5.8.60 – 3.5.12.80 (bez)3.5.13.0 – 3.5.14.10 (bez)
Codesys Control Runtime System Toolkit
APP
Codesys
3.0 – 3.5.12.80 (bez)
Codesys Control Win
APP
Codesys
3.5.9.80 – 3.5.12.803.5.13.0 – 3.5.14.10 (bez)
Codesys Embedded Target Visu Toolkit
APP
Codesys
3.0 – 3.5.12.80 (bez)
Codesys Hmi
APP
Codesys
3.5.10.0 – 3.5.12.80 (bez)3.5.13.0 – 3.5.14.10 (bez)
Codesys Remote Target Visu Toolkit
APP
Codesys
3.0 – 3.5.12.80 (bez)