Lucene search
CERTVDECVELIST:CVE-2022-31804HistoryJun 24, 2022 - 7:46 a.m.
CVE-2022-31804 CODESYS Gateway server prone to denial of service attack due to excessive memory allocation
2022-06-2407:46:13
CWE-789
CERTVDE
www.cve.org
2
codesys
gateway
denial of service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
40.4%
The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.
CNA Affected
[
{
"product": "CODESYS Gateway Server V2",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V2.3.9.38",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
prion
prion
Memory corruption
2022-06-24 08:15:00
nvd
nvd
CVE-2022-31804
2022-06-24 08:15:07
cve
cve
CVE-2022-31804
2022-06-24 08:15:07
thn
thn
Critical Security Flaws Identified in CODESYS ICS Automation Software
2022-06-27 10:35:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
40.4%
Related for CVELIST:CVE-2022-31804