Skip to content
Sign in
7.5 High

CVE-2021-34585 In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error

Description

In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.

Affected products and versions

Product Affected versions Fixed in
CODESYS V2 1.1 earliest → < 1.1.9.22 1.1.9.22

Other CVEs of CODESYS V2

The 7 CVEs of CODESYS V2 →
CVE-2021-34596 A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and… 6.5 Medium CVE-2021-34595 A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit… 8.1 High CVE-2021-34593 In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid… 7.5 High CVE-2021-34586 In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in… 7.5 High
Track this CVE