7.5
Élevée
CVE-2021-34593 In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid…
Description
In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing the PLC.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CODESYS V2 2.4 | premières → < 2.4.7.56 | 2.4.7.56 |
Autres CVE de CODESYS V2
Les 7 CVE de CODESYS V2 →
CVE-2021-34596
A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and…
6.5
Moyenne
CVE-2021-34595
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit…
8.1
Élevée
CVE-2021-34586
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in…
7.5
Élevée
CVE-2021-34585
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error
7.5
Élevée