WAGO 750-8xxx PLC Denial Of Service / User Enumeration

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Denial of service & User Enumeration product: WAGO 750-8xxx PLC vulnerable version: Firmware 20 Patch 1 v03.08.08 fixed version: Firmware 20 Patch 1 v03.08.08 CVE number:...

CVE-2022-22510

Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service DoS attack of an unauthenticated user via SNMP...

CVE-2022-22510

Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service DoS attack of an unauthenticated user via SNMP...

Null pointer dereference

Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service DoS attack of an unauthenticated user via SNMP...

CVE-2022-22510 CODESYS: Null Pointer Dereference in CODESYS PROFINET stack

Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service DoS attack of an unauthenticated user via SNMP...

CVE-2022-22510

CVE-2022-22510 affects the Codesys Profinet stack; specifically vulnerable in version V4.2.0.0 due to a null pointer dereference that allows a denial of service by an unauthenticated user via SNMP. The connected documents confirm the vulnerable component and the root cause, but do not provide exp...

Profinet 代码问题漏洞

Profinet is an open industrial Ethernet communication protocol proposed by the PROFIBUS & PROFINET International Association. A code issue vulnerability exists in Profinet that stems from a null pointer dereference in Codesys Profinet, which allows denial of service DoS attacks via SNMP on...

CVE-2022-22510

Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service DoS attack of an unauthenticated user via SNMP...

CODESYS V3 Web Server Heap-based Buffer Overflow (CVE-2021-33485)

Binary data scadacodesys2021-09.nbin...

CVE-2021-34599

Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implement certificate validation by default, so it does not verify that the server provides a valid and trusted HTTPS certificate. Since the certificate of the serv...

CVE-2021-34599

Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implement certificate validation by default, so it does not verify that the server provides a valid and trusted HTTPS certificate. Since the certificate of the serv...

Input validation

Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implement certificate validation by default, so it does not verify that the server provides a valid and trusted HTTPS certificate. Since the certificate of the serv...

CVE-2021-34599 Improper Certificate Validation in CODESYS Git

Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implement certificate validation by default, so it does not verify that the server provides a valid and trusted HTTPS certificate. Since the certificate of the serv...

CVE-2021-34599

CVE-2021-34599 affects CODESYS Git versions prior to 1.1.0.0, where HTTPS handshakes do not perform certificate validation by default. This transparent lack of server certificate verification can allow a man-in-the-middle attack on connections to untrusted TLS endpoints. The vulnerability is desc...

CODESYS 信任管理问题漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A trust management issue vulnerability exists in CODESYS Git, which stems from the lack of certificate validation in the HTTPS handshake in affected CODESYS Git versions prior to V1.1.0.0. An attacker could...

CODESYS 2.4.7.0 Denial Of Service Exploit

======================================================================= title: CODESYS V2 Denial of Service product: CODESYS Runtime Toolkit 32-bit, CODESYS PLCWinNT vulnerable version: V2.4.7.56 fixed version: V2.4.7.56 CVE number: CVE-2021-34593 impact: High homepage: https://www.codesys.com/...

CVE-2021-34595

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite...

CVE-2021-34595

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite...

CVE-2021-34593

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing...

CVE-2021-34596

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...