CVE-2021-42705

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

Out-of-bounds

PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

Stack overflow

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-42705 WECON PLC Editor

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-42705

CVE-2021-42705 affects WECON PLC Editor (Versions 1.3.8 and earlier). The vulnerability is a stack-based buffer overflow occurring while processing WCP/project files, leading to arbitrary code execution in the context of the affected process. Public sources (ZDI/CISA ICS advisory) describe the fl...

CVE-2021-42707 WECON PLC Editor

PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-42707

PLC Editor (WECON) versions 1.3.8 and earlier are affected by an out-of-bounds write in the WCP/project-file parsing flow (CWE-787), which may allow arbitrary code execution. Several sources describe this as memory corruption during WCP file parsing; some references note remote-code-execution pot...

CVE-2021-42707: Out-of-bounds Write

PLC Editor Versions 1.3.8 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-42705: Stack-based Buffer Overflow

PLC Editor Versions 1.3.8 and prior is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

WECON PLC Editor WCP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

WECON PLC Editor Out-of-Bounds Writing Vulnerability

WECON PLC Editor is a PLC programming software.An out-of-bounds write vulnerability exists in WECON PLC Editor 1.3.8 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

WECON PLC Editor Stack Buffer Overflow Vulnerability (CNVD-2021-93633)

WECON PLC Editor is a PLC programming software.WECON PLC Editor 1.3.8 and earlier versions are vulnerable to a stack buffer overflow. An attacker can exploit this vulnerability to execute arbitrary code...

PT-2021-5055

Name of the Vulnerable Software and Affected Versions Wecon PLC Editor versions 1.3.8 and prior Description The issue is related to a stack-based buffer overflow that occurs while processing project files, potentially allowing an attacker to execute arbitrary code. This is a result of the...

PT-2021-5344

Name of the Vulnerable Software and Affected Versions Wecon PLC Editor versions 1.3.8 and prior Description The issue is related to an out-of-bounds write in memory while processing project files, which may allow an attacker to execute arbitrary code. This can be exploited by an attacker to gain...

WECON PLC Editor

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: WECON Equipment: PLC Editor Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow arbitrary code execution. 3. TECHNICAL DETAILS 3.1...

CODESYS 2.4.7.0 Denial Of Service Exploit

======================================================================= title: CODESYS V2 Denial of Service product: CODESYS Runtime Toolkit 32-bit, CODESYS PLCWinNT vulnerable version: V2.4.7.56 fixed version: V2.4.7.56 CVE number: CVE-2021-34593 impact: High homepage: https://www.codesys.com/...

CVE-2021-34593 CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing...

PT-2021-20571 · 3S Smart Software Solutions · Codesys V2 Runtime Toolkit +1

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Runtime Toolkit 32 Bit full versions prior to V2.4.7.56 PLCWinNT versions prior to V2.4.7.56 Description: A crafted request may cause a read access to an uninitialized pointer, resulting in a denial-of-service condition...

CODESYS 安全漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56, which stems from a crafted invalid request without authentication in the affected software may...