CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.
El servidor web CODESYS versiones V3 anteriores a 3.5.15.40, como es usado en los sistemas de tiempo de ejecución CODESYS Control, presenta un desbordamiento del búfer.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:C/I:C/A:C
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | COMPLETE |
| Integrity Impact | COMPLETE |
| Availability Impact | COMPLETE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone | * | <built-in method update of dict object at 0x7e6108405500> | Application |
| codesys | control_for_empc-a\/imx6 | * | <built-in method update of dict object at 0x7e60bae48740> | Application |
| codesys | control_for_iot2000 | * | <built-in method update of dict object at 0x7e60bae4b480> | Application |
| codesys | control_for_linux | * | <built-in method update of dict object at 0x7e60bafaf840> | Application |
| codesys | control_for_pfc100 | * | <built-in method update of dict object at 0x7e6108405540> | Application |
| codesys | control_for_pfc200 | * | <built-in method update of dict object at 0x7e6108407140> | Application |
| codesys | control_for_plcnext | * | <built-in method update of dict object at 0x7e60a8894440> | Application |
| codesys | control_for_raspberry_pi | * | <built-in method update of dict object at 0x7e6111c1db80> | Application |
| codesys | control_rte | * | <built-in method update of dict object at 0x7e60bae4b280> | Application |
| codesys | control_rte | * | <built-in method update of dict object at 0x7e61084070c0> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e61084044c0> | Application |
| codesys | control_win | * | <built-in method update of dict object at 0x7e6111c1c940> | Application |
| codesys | embedded_target_visu_toolkit | * | <built-in method update of dict object at 0x7e60bae4ac40> | Application |
| codesys | hmi | * | <built-in method update of dict object at 0x7e60bae4a080> | Application |
| codesys | remote_target_visu_toolkit | * | <built-in method update of dict object at 0x7e60bae4ac00> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte:*:*:*:*:*:beckhoff_cx:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:* |