CVE-2022-31802

CVE-2022-31802 affects CODESYS Gateway Server V2 prior to 2.3.9.38. The root cause is that only a portion of the specified password is compared to the real gateway password, enabling authentication by a short password fragment. Additional CVEs notes (and the linked advisories) describe related is...

CODESYS Gateway Server安全漏洞

CODESYS Gateway Server is an extended CODESYS gateway from CODESYS Corporation that connects CODESYS automation servers to CODESYS PLCs in the local network. A security vulnerability exists in CODESYS Gateway Server V2 that stems from not verifying that the size of a request is within the expecte...

CODESYS Gateway Server 安全漏洞

CODESYS Gateway Server is an extended CODESYS Gateway from CODESYS Corporation that connects a CODESYS Automation Server to a CODESYS PLC in a local network. A security vulnerability exists in versions prior to CODESYS Gateway Server V2 V2.3.9.38 that stems from comparing only a portion of a...

CODESYS Gateway Server 资源管理错误漏洞

CODESYS Gateway Server is an extended CODESYS gateway from CODESYS Corporation that connects CODESYS automation servers to CODESYS PLCs in the local network. A resource management error vulnerability exists in CODESYS Gateway Server V2 that stems from insufficient inspection of TCP client...

PT-2022-20942 · 3S Smart Software Solutions · Codesys Gateway Server

Name of the Vulnerable Software and Affected Versions: CODESYS Gateway Server V2 versions prior to V2.3.9.38 Description: The issue allows an attacker to perform authentication by specifying a small password that matches a part of the longer real CODESYS Gateway password, as only a part of the...

CVE-2022-31804

The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition...

CVE-2022-31803

In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server V2. Existing connectio...

CVE-2022-31802

In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gatewa...

Vulnerabilities fixed in Schneider Electric Modicon M241/M251

Schneider Electric has fixed vulnerabilities in the CODESYS web server and gateway components of Modicon M241 and M251 controllers. An unauthenticated remote malicious person could potentially exploit the vulnerabilities to cause a denial-of-service cause or execute arbitrary code with the...

CVE-2021-36764

In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition...

CVE-2021-36764

In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition...

CVE-2021-36764

The CVE-2021-36764 issue affects CODESYS Gateway V3 prior to version 3.5.17.10, where a NULL pointer dereference can be triggered by crafted communication requests, potentially causing a denial-of-service in affected CODESYS products. The connected sources consistently describe this NULL pointer ...

3S-Smart Software Solutions CODESYS GatewayService代码问题漏洞

3s-smart Software Solutions 3S-Smart Software Solutions CODESYS GatewayService is a gateway service for use in CODESYS products from 3S-Smart Software Solutions 3s-smart Software Solutions of Germany. CODESYS GatewayService is a gateway service used in CODESYS products. A code issue vulnerability...

CVE-2021-29241

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

CVE-2021-29241

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

CVE-2021-29241

CVE-2021-29241 affects CODESYS Gateway V3 prior to version 3.5.16.70. The vulnerability is a NULL pointer dereference in the CmpGateway component that can lead to a denial-of-service condition. Several sources corroborate the issue and its association with the Gateway V3 product line (3S‑Smart/CO...

CVE-2021-29241

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

CVE-2021-29241

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

PT-2021-7789

Name of the Vulnerable Software and Affected Versions CODESYS Gateway 3 versions prior to 3.5.17.0 Description The issue is related to a NULL pointer dereference error in the CODESYS Gateway 3 software. This error may result in a denial of service DoS. The vulnerability can be exploited by a remo...

CODESYS 代码问题漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A code issue vulnerability exists in CODESYS Gateway 3 versions prior to 3.5.17.0, which stems from a NULL pointer dereference that could lead to a denial of service DoS...