Lucene search
+L

1556 matches found

Positive Technologies
Positive Technologies
added 2021/05/25 12:0 a.m.3 views

PT-2021-3341 · 3S Smart Software Solutions · Codesys V2 Web-Server

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is related to an improperly implemented security check in the CODESYS V2 Web-Server, which is associated with inadequate access control. This can allow a remote attacker ...

10CVSS7.3AI score0.01151EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2021/05/25 12:0 a.m.6 views

CODESYS V2 Web-Server 缓冲区错误漏洞

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. A buffer overflow vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the help ...

9.8CVSS6.4AI score0.0127EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2021/05/25 12:0 a.m.4 views

PT-2021-3337 · 3S Smart Software Solutions · Codesys V2 Web-Server

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is caused by a buffer overflow in the dynamic memory of the CODESYS V2.3 web server, which is part of the CODESYS industrial automation software complex. This can allow a...

10CVSS7.8AI score0.0127EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/05/25 12:0 a.m.4 views

3S-Smart Software Solutions CODESYS V2 Web-Server 缓冲区错误漏洞

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. An input validation error vulnerability exists in 3S-Smart Software Solutions...

7.5CVSS5.7AI score0.0718EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/05/25 12:0 a.m.6 views

CODESYS V2 Web-Server 访问控制错误漏洞

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An access control error vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the...

9.8CVSS5.7AI score0.01402EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/05/25 12:0 a.m.6 views

3S-Smart Software Solutions CODESYS Control runtime system 缓冲区错误漏洞

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. A buffer overflow vulnerability exists in the 3S-Smart Software Solutions CODESY...

7.5CVSS6AI score0.07356EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/05/25 12:0 a.m.8 views

3S-Smart Software Solutions CODESYS V2 Web-Server 缓冲区错误漏洞

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An out-of-bounds write vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with a...

9.8CVSS5.9AI score0.01151EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/05/25 12:0 a.m.5 views

PT-2021-3338 · 3S Smart Software Solutions · Codesys V2 Web-Server

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is related to improper access control in the CODESYS V2 Web-Server, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability...

10CVSS7.3AI score0.01402EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/05/25 12:0 a.m.4 views

PT-2021-3340 · 3S Smart Software Solutions · Codesys V2 Runtime System

Name of the Vulnerable Software and Affected Versions: CODESYS V2 runtime system SP versions prior to 2.4.7.55 Description: The issue arises from the improper neutralization of special elements used in an OS command, potentially allowing an attacker to impact the confidentiality, integrity, and...

5.3CVSS7.2AI score0.00268EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/05/25 12:0 a.m.5 views

PT-2021-3346 · 3S Smart Software Solutions · Codesys V2 Runtime System

Name of the Vulnerable Software and Affected Versions: CODESYS V2 runtime system SP versions prior to 2.4.7.55 Description: The issue is a stack-based buffer overflow in the CODESYS V2 runtime system SP. This can be exploited by a remote attacker to impact the confidentiality, integrity, and...

10CVSS7.8AI score0.01281EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/05/25 12:0 a.m.6 views

3S-Smart Software Solutions CODESYS V2 Web-Server 安全漏洞

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. A security check bypass vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker to bypas...

9.8CVSS5.7AI score0.01151EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/05/25 12:0 a.m.4 views

PT-2021-3345 · 3S Smart Software Solutions · Codesys V2 Runtime System

Name of the Vulnerable Software and Affected Versions: CODESYS V2 runtime system SP versions prior to 2.4.7.55 Description: The issue is a Heap-based Buffer Overflow in the CODESYS V2 runtime system SP. This can be exploited by a remote attacker to cause a denial of service. Recommendations: For...

7.8CVSS7.2AI score0.07356EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/05/25 12:0 a.m.10 views

3S-Smart Software Solutions CODESYS Control runtime system 操作系统命令注入漏洞

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. An operating system command injection vulnerability exists in the 3S-Smart...

5.3CVSS5.8AI score0.00268EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/05/25 12:0 a.m.5 views

PT-2021-3339 · 3S Smart Software Solutions · Codesys V2 Web-Server

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is caused by a buffer copy without checking the size of the input, which can lead to a buffer overflow on the stack. This can allow a remote attacker to cause a denial of...

7.8CVSS7.8AI score0.01017EPSS
SaveExploits0References7
OSV
OSV
added 2021/05/04 12:15 p.m.7 views

CVE-2021-29240

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

7.8CVSS5.8AI score0.00936EPSS
SaveExploits1References3
NVD
NVD
added 2021/05/04 12:15 p.m.25 views

CVE-2021-29240

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

7.8CVSS0.00936EPSS
SaveExploits1References3
Prion
Prion
added 2021/05/04 12:15 p.m.21 views

Code injection

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

6.8CVSS7.5AI score0.00936EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2021/05/04 11:0 a.m.71 views

CVE-2021-29240

CVE-2021-29240 affects the CODESYS Development System Package Manager prior to version 3.5.17.0, which does not verify the validity of packages before installation, enabling potentially malicious packages to be installed. Public sources (NVD, Red Hat advisory) describe this as an insufficient dat...

7.8CVSS8.1AI score0.00936EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/05/04 11:0 a.m.29 views

CVE-2021-29240

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

7.8AI score0.00936EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/05/04 12:0 a.m.10 views

3s-smart Software Solutions CODESYS Development System 安全漏洞

3s-smart Software Solutions CODESYS Development System is a suite of programming tools for the field of industrial controllers and automation technology from 3S-Smart Software Solutions 3s-smart Software Solutions, Germany. A security vulnerability exists in CODESYS Development System prior to...

7.8CVSS7.6AI score0.00936EPSS
SaveExploits1References4
Rows per page
Query Builder