PT-2020-19360

Name of the Vulnerable Software and Affected Versions CODESYS Control V3 versions prior to 3.5.15.30 CODESYS Gateway V3 versions prior to 3.5.15.30 CODESYS HMI V3 versions prior to 3.5.15.30 Description The issue allows for uncontrolled memory allocation, which can result in a remote denial of...

CVE-2020-7052: Allocation of Resources Without Limits or Throttling

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition...

CODESYS Gateway V3 DoS

Binary data scadacodesyscve-2019-9012.nbin...

CVE-2019-9010

An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of...

PT-2019-19308 · 3S Smart · Codesys V3

Name of the Vulnerable Software and Affected Versions: 3S-Smart CODESYS V3 products versions prior to 3.5.14.20 Description: An issue was discovered in 3S-Smart CODESYS V3 products where the CODESYS Gateway does not correctly verify the ownership of a communication channel. Recommendations: For...

3S CODESYS Gateway Null Pointer Exception Vulnerability

CODESYS Gateway Server is a software-defined server. A null pointer exception vulnerability exists in CODESYS Gateway Server 2.3.9.47 and earlier versions when processing certain HTTP POST/GET requests. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2015-6484

CVE-2015-6484 affects 3S-Smart Software Solutions GmbH’s CODESYS Gateway Server up to version 2.3.9.47 (prior to 2.3.9.48). The vulnerability is a NULL pointer dereference triggered by processing certain HTTP requests (GET/POST), which can cause the server process to crash and result in a denial ...

CVE-2015-6484: Undefined Security Weakness

3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted 1 GET or 2 POST request...

PT-2015-7267

Name of the Vulnerable Software and Affected Versions 3S-Smart CODESYS Gateway Server versions prior to 2.3.9.48 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via crafted GET or POST requests. Recommendations...

3S-Smart Software Solutions CODESYS Gateway Server Heap Buffer Overflow Vulnerability

3S-Smart Software Solutions CoDeSys is a set of PLC programmable logic controller software programming tools from 3S-Smart Software Solutions, Germany.CODESYS Gateway Server is one of the CODESYS Gateway Servers. A heap buffer overflow vulnerability exists in 3S-Smart Software Solutions CODESYS...

CVE-2015-6460

Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode 1 0x3ef or 2 0x3f0...

CVE-2015-6460

Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode 1 0x3ef or 2 0x3f0...

CVE-2015-6460

CVE-2015-6460 affects the CODESYS Gateway Server. Multiple heap-based buffer overflow vulnerabilities in the Gateway Server allow remote code execution via crafted inputs targeting opcodes 0x3ef and 0x3f0. Affected products are CODESYS Gateway Server versions prior to 2.3.9.34 (ICS advisory notes...

CVE-2015-6460: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode 1 0x3ef or 2 0x3f0...

PT-2015-7256 · 3S Smart Software Solutions · Codesys Gateway Server

Name of the Vulnerable Software and Affected Versions: CODESYS Gateway Server versions prior to 2.3.9.34 Description: The issue is related to multiple heap-based buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved via specific opcodes, including 0x3ef and...

CODESYS Gateway Server Opcode 0x3f0 Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CODESYS Gateway Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the 0x03f0 opcode. An attacker can send a large buffer of data ...

CODESYS Gateway Server Opcode 0x3ef Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CODESYS Gateway Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the 0x3ef opcode. An attacker can send a large buffer of data t...

3S Smart Software Solutions CoDeSys Gateway Server Denial Of Service (CVE-2012-4707)

A denial of service vulnerability has been reported in 3S Smart Software Solutions CoDeSys Gateway Server...

3S Smart Software Solutions CoDeSys Gateway Server Memory Access Error (CVE-2012-4704)

A memory access error vulnerability has been reported in Smart Software CoDeSys Gateway Server...

CVE-2013-2781

Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...