EUVD-2013-2720

Malware in sbrugna...

CVE-2013-2781

CVE-2013-2781 is a use-after-free vulnerability in the 3S CODESYS Gateway server (version 2.3.9.27). It allows remote attackers to cause a DoS (daemon crash) and potentially execute arbitrary code via unspecified vectors. Public details come from multiple sources (NVD/Red Hat/Nessus/ICS-CERT). Mi...

PT-2013-3924

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway version 2.3.9.27 Description A use-after-free issue in the server application allows remote attackers to cause a denial of service, potentially leading to a daemon crash, or possibly execute arbitrary code. The exact vectors...

CVE-2013-2781: Undefined Security Weakness

Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...

3S CoDeSys Gateway Server Crafted Packet Stack Overflow

Added: 04/29/2013 CVE: CVE-2012-4708 BID: 58032 OSVDB: 90371 Background Smart Software Solutions GmbH 3S manufactures CoDeSys Gateway Server, a Supervisory Control and Data Acquisition/Human-Machine Interface SCADA/HMI product. The Gateway Server listens on TCP port 1211. Problem 3S CoDeSys Gatew...

Directory traversal

Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname...

Integer overflow

Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow...

CVE-2012-4705

Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname...

CVE-2012-4705

Affected software: 3S CODESYS Gateway-Server (GATEWAY-SERVER). Vulnerability: Directory traversal that can lead to remote code execution via crafted pathnames; impact per ICS-CERT includes remote execution potential. Root cause / vector: Improper handling of directory traversal in the Gateway-Ser...

CVE-2012-4706

CVE-2012-4706 affects the 3S CODESYS Gateway-Server prior to version 2.3.9.27. The vulnerability is a heap-based buffer overflow caused by a signedness/error in processing a crafted TCP packet (port 1211), enabling remote denial of service. Documents indicate this is part of a set of vulnerabilit...

CVE-2012-4704

CVE-2012-4704 affects the 3S CODESYS Gateway-Server (prior to ver. 2.3.9.27). The vulnerability is described as a memory access error (array/index handling) in the Gateway-Server that can allow a remote attacker to execute arbitrary code via a crafted packet. ICS-CERT/3S advisories confirm remote...

PT-2013-1704

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway-Server versions prior to 2.3.9.27 Description A directory traversal issue allows remote attackers to execute arbitrary code via crafted pathnames. Recommendations For versions prior to 2.3.9.27, update to version 2.3.9.27 or...

PT-2013-1705

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway-Server versions prior to 2.3.9.27 Description The issue is caused by an integer signedness error that allows remote attackers to trigger a heap-based buffer overflow via a crafted packet, resulting in a denial of service...

PT-2013-1703

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway-Server versions prior to 2.3.9.27 Description The issue allows remote attackers to execute arbitrary code via a crafted packet due to an array index error. Recommendations For versions prior to 2.3.9.27, update to version...

PT-2013-1706

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway-Server versions prior to 2.3.9.27 Description The issue allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access. Recommendations For versions prior to 2.3.9.27, update to...

PT-2013-1707

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway-Server versions prior to 2.3.9.27 Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted packet. Recommendations For versions prior to 2.3.9.27, update to version...

CVE-2012-4708: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet...

CVE-2012-4705: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname...

CVE-2012-4704: Improper Input Validation

Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet...

CVE-2012-4707: Improper Control of Generation of Code

3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access...