CVE-2021-30187

Summary: CVE-2021-30187 affects the CODESYS V2 Runtime System SPs prior to 2.4.7.55, enabling an OS command injection via the SysFile library. Affected product/component: CODESYS Control/Runtime Toolkit 32‑bit full SP before 2.4.7.55 (CODESYS V2 Runtime System). Root cause: Improper neutralizatio...

CVE-2021-30187

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...

PT-2021-3344

Name of the Vulnerable Software and Affected Versions CODESYS V2 runtime system versions prior to 2.4.7.55 Description The issue exists due to the reading of data beyond the boundaries of a specified buffer in the CODESYS Control V2 Linux SysFile library of the CODESYS industrial automation...

PT-2021-3342

Name of the Vulnerable Software and Affected Versions CODESYS V2 Web-Server versions prior to 1.1.9.20 Description The issue is caused by an out-of-bounds write, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. This i...

PT-2021-3343

Name of the Vulnerable Software and Affected Versions CODESYS V2 Web-Server versions prior to 1.1.9.20 Description The issue is related to an out-of-bounds read in the CODESYS V2 Web-Server component of the CODESYS industrial automation software suite. This can be exploited by a remote attacker t...

CODESYS V2 Web-Server 缓冲区错误漏洞

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. A buffer overflow vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the help ...

3S-Smart Software Solutions CODESYS V2 Web-Server 缓冲区错误漏洞

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An out-of-bounds read vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the...

CVE-2021-30194: Out-of-bounds Read

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read...

CVE-2021-30193: Out-of-bounds Write

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write...

CVE-2021-30192: Undefined Security Weakness

CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...

CVE-2021-30188: Out-of-bounds Write

CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow...

CVE-2021-30186: Out-of-bounds Write

CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...

CVE-2021-30189: Out-of-bounds Write

CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow...

CVE-2021-30191: Buffer Copy without Checking Size of Input

CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input...

CVE-2021-30190: Missing Authentication for Critical Function

CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control...

CVE-2021-30187: Improper Neutralization of Special Elements used in an OS Command

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...

Input validation

The USB firmware update script of homee Brain Cube v2 2.28.2 and 2.28.4 devices allows an attacker with physical access to install compromised firmware. This occurs because of insufficient validation of the firmware image file and can lead to code execution on the device...

Hardcoded credentials

homee Brain Cube v2 2.28.2 and 2.28.4 devices have sensitive SSH keys within downloadable and unencrypted firmware images. This allows remote attackers to use the support server as a SOCKS proxy...

CVE-2020-24396

homee Brain Cube v2 2.28.2 and 2.28.4 devices have sensitive SSH keys within downloadable and unencrypted firmware images. This allows remote attackers to use the support server as a SOCKS proxy...

CVE-2020-24396

CVE-2020-24396 affects homee Brain Cube v2 (firmware 2.28.2 and 2.28.4). The issue is that sensitive SSH keys are stored within downloadable and unencrypted firmware images, enabling remote attackers to use the support server as a SOCKS proxy. Documented impact is exposure of credentials and pote...