Lucene search
HistoryDec 25, 2011 - 1:55 a.m.
CVE-2011-5008
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.478 Medium
EPSS
Percentile
97.5%
Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow.
Affected configurations
Node
3ssoftwarecodesysMatch3.4sp4
Related
cvelist
cvelist
CVE-2011-5008
2011-12-25 01:00:00
cve
cve
CVE-2011-5008
2011-12-25 01:55:04
prion
prion
Integer overflow
2011-12-25 01:55:00
ics
ics
3S CoDeSys Vulnerabilities
2018-09-06 12:00:00
openvas
openvas
Codesys CmpWebServer Multiple Vulnerabilities
2011-12-06 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.478 Medium
EPSS
Percentile
97.5%
Related for NVD:CVE-2011-5008