CVE-2015-6460

🗓️ 18 Sep 2015 22:00:00Reported by icscertType

Heap buffer overflows in CODESYS Gateway Server allow code execution by remote attackers.

Reporter	Title	Published	Views	Family All 9
CNVD	3S-Smart Software Solutions CODESYS Gateway Server Heap Buffer Overflow Vulnerability	22 Sep 201500:00	–	cnvd
Check Point Advisories	CoDeSys Gateway Server Opcode 0x3ef Heap Buffer Overflow (CVE-2015-6460)	7 Jan 201600:00	–	checkpoint_advisories
Cvelist	CVE-2015-6460	18 Sep 201522:00	–	cvelist
ICS	CODESYS Gateway Server (Update A)	30 Jun 202212:00	–	ics
NVD	CVE-2015-6460	18 Sep 201522:59	–	nvd
Prion	Heap overflow	18 Sep 201522:59	–	prion
Positive Technologies	PT-2015-7256 · 3S Smart Software Solutions · Codesys Gateway Server	16 Sep 201500:00	–	ptsecurity
Zero Day Initiative	CODESYS Gateway Server Opcode 0x3ef Heap Buffer Overflow Remote Code Execution Vulnerability	16 Sep 201500:00	–	zdi
Zero Day Initiative	CODESYS Gateway Server Opcode 0x3f0 Heap Buffer Overflow Remote Code Execution Vulnerability	16 Sep 201500:00	–	zdi

NVD

Vulners

Node

3s-smart codesys_gateway_serverRange<2.3.9.34

[
  {
    "product": "3S-Smart CODESYS Gateway Server",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "2.3.9.34",
        "status": "affected",
        "version": "V2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-15-442/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-15-441/
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-15-258-02

06 May 2026 22:30Current

8High risk

Vulners AI Score8

CVSS 27.5

EPSS0.08638

CWE-119