9.1
Critique
CVE-2021-34584 Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service…
Description
Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CODESYS V2 1.1 | premières → < 1.1.9.22 | 1.1.9.22 |
Références
- customers.codesys.com customers.codesys.com
- www.tenable.com www.tenable.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de CODESYS V2
Les 7 CVE de CODESYS V2 →
CVE-2021-34596
A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and…
6.5
Moyenne
CVE-2021-34595
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit…
8.1
Élevée
CVE-2021-34593
In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid…
7.5
Élevée
CVE-2021-34586
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in…
7.5
Élevée