Null pointer dereference

3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted 1 GET or 2 POST request...

CVE-2015-6484

CVE-2015-6484 affects 3S-Smart Software Solutions GmbH’s CODESYS Gateway Server up to version 2.3.9.47 (prior to 2.3.9.48). The vulnerability is a NULL pointer dereference triggered by processing certain HTTP requests (GET/POST), which can cause the server process to crash and result in a denial ...

CVE-2015-6484

3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted 1 GET or 2 POST request...

3S CODESYS Runtime Toolkit < 2.4.7.48 PLCWinNT DoS (credentialed check)

Binary data scadacodesysplcwinnt24748local.nbin...

3S CODESYS Runtime Toolkit Null Pointer Indirect Reference Vulnerability

CODESYS Runtime Toolkit is embedded third-party software used in a variety of industries. A null pointer indirect reference vulnerability exists in 3S-Smart CODESYS versions prior to 2.3.9.48 and in Runtime Toolkit versions prior to 2.4.7.48. A remote attacker could cause a denial of service cras...

CVE-2015-6482

Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted request...

Null pointer dereference

Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted request...

CVE-2015-6482

Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted request...

CVE-2015-6482

CVE-2015-6482 affects 3S-Smart CODESYS Runtime Toolkit prior to version 2.4.7.48 and CODESYS prior to 2.3.9.48. The vulnerability is a NULL pointer dereference that can be triggered by a crafted request, enabling remote denial of service (application crash). Public sources in the connected set co...

3S-Smart Software Solutions CODESYS Gateway Server Heap Buffer Overflow Vulnerability

3S-Smart Software Solutions CoDeSys is a set of PLC programmable logic controller software programming tools from 3S-Smart Software Solutions, Germany.CODESYS Gateway Server is one of the CODESYS Gateway Servers. A heap buffer overflow vulnerability exists in 3S-Smart Software Solutions CODESYS...

CVE-2015-6460

Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode 1 0x3ef or 2 0x3f0...

CVE-2015-6460

CVE-2015-6460 affects the CODESYS Gateway Server. Multiple heap-based buffer overflow vulnerabilities in the Gateway Server allow remote code execution via crafted inputs targeting opcodes 0x3ef and 0x3f0. Affected products are CODESYS Gateway Server versions prior to 2.3.9.34 (ICS advisory notes...

CVE-2015-6460

Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode 1 0x3ef or 2 0x3f0...

CODESYS Gateway Server Opcode 0x3ef Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CODESYS Gateway Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the 0x3ef opcode. An attacker can send a large buffer of data t...

PT-2015-7256 · 3S Smart Software Solutions · Codesys Gateway Server

Name of the Vulnerable Software and Affected Versions: CODESYS Gateway Server versions prior to 2.3.9.34 Description: The issue is related to multiple heap-based buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved via specific opcodes, including 0x3ef and...

CODESYS Gateway Server Opcode 0x3f0 Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CODESYS Gateway Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the 0x03f0 opcode. An attacker can send a large buffer of data ...

3S CODESYS Runtime Toolkit Null Pointer Dereference Vulnerability

OVERVIEW Nicholas Miles of Tenable Network Security has identified a NULL pointer dereference vulnerability in 3S-Smart Software Solutions GmbH’s CODESYS Runtime Toolkit. 3S has produced a new version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCT...

Network Time Protocol Vulnerabilities (Supplement Update A)

OVERVIEW --------- Begin Update A Part 1 of 2 -------- This advisory supplement is to accompany the NCCIC/ICS-CERT advisory titled ICSA-14-353-01C Network Time Protocol Vulnerabilities that was published February 5, 2015, on the ICS‑CERT web site. --------- End Update A Part 1 of 2 ----------...

Festo CECX-X-(C1/M1) Controller Vulnerabilities

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on March 25, 2014, and is now being released to the NCCIC/ICS-CERT web site. K. Reid Wightman of IOActive, Inc. has identified vulnerabilities in Festo’s CECX-X-C1 and CECX-X-M1 controllers. Festo has decided not to...

3S CoDeSys Runtime Toolkit NULL Pointer Dereference

OVERVIEW Independent researcher Nicholas Miles has identified a NULL pointer dereference vulnerability in Smart Software Solutions 3S CoDeSys Runtime Toolkit application. 3S has produced an update that mitigates this vulnerability. Nicholas Miles has tested the update to validate that it resolves...