3398 matches found
CVE-2021-30193
CVE-2021-30193 affects CODESYS V2 Web-Server before 1.1.9.20. The vulnerability is an Out-of-bounds Write in the web server component, enabling crafted requests to write to arbitrary memory in the CODESYS Control runtime (potential remote code execution or crash). Affected products include CODESY...
CVE-2021-30192
CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...
CVE-2021-30192
CVE-2021-30192 affects CODESYS V2 Web-Server prior to 1.1.9.20. The vulnerability is an Improperly Implemented Security Check (CWE-358) that enables bypass of security protections on the web server, with consequences including the potential to read/write values or upload boot‑related files withou...
CVE-2021-30190
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control...
CVE-2021-30190
The CVE-2021-30190 entry covers CODESYS V2 Web-Server prior to version 1.1.9.20 with an Improper Access Control flaw. Public sources (ICSA-21-173-02, CNVD/NVD, 3rd-party advisories) describe that unauthorized remote requests can bypass authentication to read or write values on the PLC via the web...
CVE-2021-30187
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...
CVE-2021-30187
Summary: CVE-2021-30187 affects the CODESYS V2 Runtime System SPs prior to 2.4.7.55, enabling an OS command injection via the SysFile library. Affected product/component: CODESYS Control/Runtime Toolkit 32‑bit full SP before 2.4.7.55 (CODESYS V2 Runtime System). Root cause: Improper neutralizatio...
CVE-2021-30194: Out-of-bounds Read
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read...
CVE-2021-30190: Missing Authentication for Critical Function
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control...
CVE-2021-30188: Out-of-bounds Write
CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow...
CVE-2021-30191: Buffer Copy without Checking Size of Input
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input...
PT-2021-3343
Name of the Vulnerable Software and Affected Versions CODESYS V2 Web-Server versions prior to 1.1.9.20 Description The issue is related to an out-of-bounds read in the CODESYS V2 Web-Server component of the CODESYS industrial automation software suite. This can be exploited by a remote attacker t...
CVE-2021-30192: Undefined Security Weakness
CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...
PT-2021-3344
Name of the Vulnerable Software and Affected Versions CODESYS V2 runtime system versions prior to 2.4.7.55 Description The issue exists due to the reading of data beyond the boundaries of a specified buffer in the CODESYS Control V2 Linux SysFile library of the CODESYS industrial automation...
CVE-2021-30187: Improper Neutralization of Special Elements used in an OS Command
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...
CVE-2021-30186: Out-of-bounds Write
CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...
PT-2021-3342
Name of the Vulnerable Software and Affected Versions CODESYS V2 Web-Server versions prior to 1.1.9.20 Description The issue is caused by an out-of-bounds write, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. This i...
3S-Smart Software Solutions CODESYS V2 Web-Server 缓冲区错误漏洞
3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An out-of-bounds read vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the...