22212 matches found
CVE-2021-30193
CVE-2021-30193 affects CODESYS V2 Web-Server before 1.1.9.20. The vulnerability is an Out-of-bounds Write in the web server component, enabling crafted requests to write to arbitrary memory in the CODESYS Control runtime (potential remote code execution or crash). Affected products include CODESY...
CVE-2021-30193
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write...
CVE-2021-30192
CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...
CVE-2021-30192
CVE-2021-30192 affects CODESYS V2 Web-Server prior to 1.1.9.20. The vulnerability is an Improperly Implemented Security Check (CWE-358) that enables bypass of security protections on the web server, with consequences including the potential to read/write values or upload boot‑related files withou...
CVE-2021-30191
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input...
CVE-2021-30191
CVE-2021-30191 affects the CODESYS V2 Web-Server prior to 1.1.9.20. The root cause is a buffer copy without checking input size, causing a classic stack-based buffer overflow. Impact described in sources includes remote execution of code or denial of service by crashing the web server, with high-...
CVE-2021-30190
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control...
CVE-2021-30190
The CVE-2021-30190 entry covers CODESYS V2 Web-Server prior to version 1.1.9.20 with an Improper Access Control flaw. Public sources (ICSA-21-173-02, CNVD/NVD, 3rd-party advisories) describe that unauthorized remote requests can bypass authentication to read or write values on the PLC via the web...
CVE-2021-30189
CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow...
CVE-2021-30189
The CVE-2021-30189 vulnerability affects CODESYS V2 Web-Server prior to version 1.1.9.20. It is described as a stack-based buffer overflow in the web server component, which in practice could allow an attacker to run arbitrary code or cause a denial-of-service by crashing the service. Public docu...
PT-2021-3342
Name of the Vulnerable Software and Affected Versions CODESYS V2 Web-Server versions prior to 1.1.9.20 Description The issue is caused by an out-of-bounds write, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. This i...
[ASA-202105-26] gupnp: information disclosure
Arch Linux Security Advisory ASA-202105-26 ========================================== Severity: Medium Date : 2021-05-25 CVE-ID : CVE-2021-33516 Package : gupnp Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-1985 Summary ======= The package gupnp before versi...
PT-2021-3343
Name of the Vulnerable Software and Affected Versions CODESYS V2 Web-Server versions prior to 1.1.9.20 Description The issue is related to an out-of-bounds read in the CODESYS V2 Web-Server component of the CODESYS industrial automation software suite. This can be exploited by a remote attacker t...
CVE-2021-30192: Undefined Security Weakness
CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...
PT-2021-3338 · 3S Smart Software Solutions · Codesys V2 Web-Server
Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is related to improper access control in the CODESYS V2 Web-Server, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability...
PT-2021-3339 · 3S Smart Software Solutions · Codesys V2 Web-Server
Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is caused by a buffer copy without checking the size of the input, which can lead to a buffer overflow on the stack. This can allow a remote attacker to cause a denial of...
CODESYS V2 Web-server access control vulnerability
3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An access control error vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the...
PT-2021-3341 · 3S Smart Software Solutions · Codesys V2 Web-Server
Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is related to an improperly implemented security check in the CODESYS V2 Web-Server, which is associated with inadequate access control. This can allow a remote attacker ...
PT-2021-3337 · 3S Smart Software Solutions · Codesys V2 Web-Server
Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is caused by a buffer overflow in the dynamic memory of the CODESYS V2.3 web server, which is part of the CODESYS industrial automation software complex. This can allow a...