Lucene search

K
cve[email protected]CVE-2012-4704
HistoryFeb 24, 2013 - 11:48 a.m.

CVE-2012-4704

2013-02-2411:48:21
CWE-20
web.nvd.nist.gov
115
cve-2012-4704
array index error
3s codesys gateway-server
remote attackers
arbitrary code
crafted packet
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.069 Low

EPSS

Percentile

93.9%

Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.

Affected configurations

NVD
Node
3s-softwarecodesys_gateway-serverRange2.3.9.20
OR
3s-softwarecodesys_gateway-serverMatch2.3.5.1
OR
3s-softwarecodesys_gateway-serverMatch2.3.5.2
OR
3s-softwarecodesys_gateway-serverMatch2.3.5.3
OR
3s-softwarecodesys_gateway-serverMatch2.3.6.0
OR
3s-softwarecodesys_gateway-serverMatch2.3.7.0
OR
3s-softwarecodesys_gateway-serverMatch2.3.8.0
OR
3s-softwarecodesys_gateway-serverMatch2.3.8.1
OR
3s-softwarecodesys_gateway-serverMatch2.3.8.2
OR
3s-softwarecodesys_gateway-serverMatch2.3.9
OR
3s-softwarecodesys_gateway-serverMatch2.3.9.1
OR
3s-softwarecodesys_gateway-serverMatch2.3.9.2
OR
3s-softwarecodesys_gateway-serverMatch2.3.9.3
OR
3s-softwarecodesys_gateway-serverMatch2.3.9.4
OR
3s-softwarecodesys_gateway-serverMatch2.3.9.5
OR
3s-softwarecodesys_gateway-serverMatch2.3.9.18
OR
3s-softwarecodesys_gateway-serverMatch2.3.9.19

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.069 Low

EPSS

Percentile

93.9%