Lucene search

MitreCVE-2021-29242

HistoryMay 03, 2021 - 2:15 p.m.

CVE-2021-29242

2021-05-0314:15:07

CWE-20

mitre

web.nvd.nist.gov

cve-2021-29242

codesys

input validation

communication packets

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

47.2%

JSON

CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router’s addressing scheme and may re-route, add, remove or change low level communication packages.

Affected configurations

Nvd

Node

codesyscontrol_for_beaglebone_slRange3.0–4.1.0.0

codesyscontrol_for_empc-a\/imx6_slRange3.0–4.1.0.0

codesyscontrol_for_iot2000_slRange3.0–4.1.0.0

codesyscontrol_for_linux_arm_slRange3.0–4.1.0.0

codesyscontrol_for_linux_slRange3.0–4.1.0.0

codesyscontrol_for_pfc100_slRange3.0–4.1.0.0

codesyscontrol_for_pfc200_slRange3.0–4.1.0.0

codesyscontrol_for_plcnext_slRange3.0–4.1.0.0

codesyscontrol_for_raspberry_pi_slRange3.0–4.1.0.0

codesyscontrol_for_wago_touch_panels_600_slRange3.0–4.1.0.0

codesyscontrol_rteRange3.0–3.5.17.0

codesyscontrol_rteRange3.0–3.5.17.0beckhoff_cx

codesyscontrol_runtime_system_toolkitRange3.0–3.5.17.0

codesyscontrol_winRange3.0–3.5.17.0

codesysedge_gatewayRange3.0–3.5.17.0windows

codesysedge_gatewayRange3.0–4.1.0.0linux

codesysembedded_target_visu_toolkitRange3.0–3.5.17.0

codesysgatewayRange3.0–3.5.17.0

codesyshmiRange3.0–3.5.17.0

codesysopc_serverRange3.0–3.5.17.0

codesysplchandlerRange3.0–3.5.17.0

codesysremote_target_visu_toolkitRange3.0–3.5.17.0

codesyssafety_silRange3.0–3.5.17.0

codesyssimulation_runtimeRange3.0–3.5.17.0

VendorProductVersionCPE
codesyscontrol_for_beaglebone_sl*cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_empc-a\/imx6_sl*cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_iot2000_sl*cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_linux_arm_sl*cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_linux_sl*cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_pfc100_sl*cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_pfc200_sl*cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_plcnext_sl*cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_raspberry_pi_sl*cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_wago_touch_panels_600_sl*cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
codesys	control_for_beaglebone_sl	*	cpe:2.3:a:codesys:control_for_beaglebone_sl::::::::
codesys	control_for_empc-a\/imx6_sl	*	cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl::::::::
codesys	control_for_iot2000_sl	*	cpe:2.3:a:codesys:control_for_iot2000_sl::::::::
codesys	control_for_linux_arm_sl	*	cpe:2.3:a:codesys:control_for_linux_arm_sl::::::::
codesys	control_for_linux_sl	*	cpe:2.3:a:codesys:control_for_linux_sl::::::::
codesys	control_for_pfc100_sl	*	cpe:2.3:a:codesys:control_for_pfc100_sl::::::::
codesys	control_for_pfc200_sl	*	cpe:2.3:a:codesys:control_for_pfc200_sl::::::::
codesys	control_for_plcnext_sl	*	cpe:2.3:a:codesys:control_for_plcnext_sl::::::::
codesys	control_for_raspberry_pi_sl	*	cpe:2.3:a:codesys:control_for_raspberry_pi_sl::::::::
codesys	control_for_wago_touch_panels_600_sl	*	cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl::::::::

Rows per page:

1-10 of 241

References

customers.codesys.com/index.php

customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download=

www.codesys.com/security/security-reports.html

Social References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

47.2%

JSON

Related for CVE-2021-29242