Skip to content
Sign in
7.5 High

CVE-2021-34593 In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid…

Description

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing the PLC.

Affected products and versions

Product Affected versions Fixed in
CODESYS V2 2.4 earliest → < 2.4.7.56 2.4.7.56

Other CVEs of CODESYS V2

The 7 CVEs of CODESYS V2 →
CVE-2021-34596 A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and… 6.5 Medium CVE-2021-34595 A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit… 8.1 High CVE-2021-34586 In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in… 7.5 High CVE-2021-34585 In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error 7.5 High
Track this CVE