Lucene search

IcscertCVE-2012-4707

HistoryFeb 24, 2013 - 11:48 a.m.

CVE-2012-4707

2013-02-2411:48:21

CWE-94

icscert

web.nvd.nist.gov

118

cve-2012-4707

3s codesys

gateway-server

remote attackers

arbitrary code execution

memory access

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.048

Percentile

92.8%

JSON

3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access.

Affected configurations

Nvd

Node

3s-softwarecodesys_gateway-serverRange≤2.3.9.19

3s-softwarecodesys_gateway-serverMatch2.3.5.1

3s-softwarecodesys_gateway-serverMatch2.3.5.2

3s-softwarecodesys_gateway-serverMatch2.3.5.3

3s-softwarecodesys_gateway-serverMatch2.3.6.0

3s-softwarecodesys_gateway-serverMatch2.3.7.0

3s-softwarecodesys_gateway-serverMatch2.3.8.0

3s-softwarecodesys_gateway-serverMatch2.3.8.1

3s-softwarecodesys_gateway-serverMatch2.3.8.2

3s-softwarecodesys_gateway-serverMatch2.3.9

3s-softwarecodesys_gateway-serverMatch2.3.9.1

3s-softwarecodesys_gateway-serverMatch2.3.9.2

3s-softwarecodesys_gateway-serverMatch2.3.9.3

3s-softwarecodesys_gateway-serverMatch2.3.9.4

3s-softwarecodesys_gateway-serverMatch2.3.9.5

3s-softwarecodesys_gateway-serverMatch2.3.9.18

VendorProductVersionCPE
3s-softwarecodesys_gateway-server*cpe:2.3:a:3s-software:codesys_gateway-server:*:*:*:*:*:*:*:*
3s-softwarecodesys_gateway-server2.3.5.1cpe:2.3:a:3s-software:codesys_gateway-server:2.3.5.1:*:*:*:*:*:*:*
3s-softwarecodesys_gateway-server2.3.5.2cpe:2.3:a:3s-software:codesys_gateway-server:2.3.5.2:*:*:*:*:*:*:*
3s-softwarecodesys_gateway-server2.3.5.3cpe:2.3:a:3s-software:codesys_gateway-server:2.3.5.3:*:*:*:*:*:*:*
3s-softwarecodesys_gateway-server2.3.6.0cpe:2.3:a:3s-software:codesys_gateway-server:2.3.6.0:*:*:*:*:*:*:*
3s-softwarecodesys_gateway-server2.3.7.0cpe:2.3:a:3s-software:codesys_gateway-server:2.3.7.0:*:*:*:*:*:*:*
3s-softwarecodesys_gateway-server2.3.8.0cpe:2.3:a:3s-software:codesys_gateway-server:2.3.8.0:*:*:*:*:*:*:*
3s-softwarecodesys_gateway-server2.3.8.1cpe:2.3:a:3s-software:codesys_gateway-server:2.3.8.1:*:*:*:*:*:*:*
3s-softwarecodesys_gateway-server2.3.8.2cpe:2.3:a:3s-software:codesys_gateway-server:2.3.8.2:*:*:*:*:*:*:*
3s-softwarecodesys_gateway-server2.3.9cpe:2.3:a:3s-software:codesys_gateway-server:2.3.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
3s-software	codesys_gateway-server	*	cpe:2.3:a:3s-software:codesys_gateway-server::::::::
3s-software	codesys_gateway-server	2.3.5.1	cpe:2.3:a:3s-software:codesys_gateway-server:2.3.5.1:::::::*
3s-software	codesys_gateway-server	2.3.5.2	cpe:2.3:a:3s-software:codesys_gateway-server:2.3.5.2:::::::*
3s-software	codesys_gateway-server	2.3.5.3	cpe:2.3:a:3s-software:codesys_gateway-server:2.3.5.3:::::::*
3s-software	codesys_gateway-server	2.3.6.0	cpe:2.3:a:3s-software:codesys_gateway-server:2.3.6.0:::::::*
3s-software	codesys_gateway-server	2.3.7.0	cpe:2.3:a:3s-software:codesys_gateway-server:2.3.7.0:::::::*
3s-software	codesys_gateway-server	2.3.8.0	cpe:2.3:a:3s-software:codesys_gateway-server:2.3.8.0:::::::*
3s-software	codesys_gateway-server	2.3.8.1	cpe:2.3:a:3s-software:codesys_gateway-server:2.3.8.1:::::::*
3s-software	codesys_gateway-server	2.3.8.2	cpe:2.3:a:3s-software:codesys_gateway-server:2.3.8.2:::::::*
3s-software	codesys_gateway-server	2.3.9	cpe:2.3:a:3s-software:codesys_gateway-server:2.3.9:::::::*