CVE-2017-6025

CVE-2017-6025 affects 3S-Smart Software Solutions GmbH CODESYS Web Server (WebVisu) versions 2.3 and prior. Root cause: stack-based buffer overflow when processing XML due to unverified string sizes during memory copy, allowing a malicious user to crash the application or potentially execute arbi...

CVE-2017-6025: Stack-based Buffer Overflow

A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A malicious user could overfl...

CVE-2017-6027: Unrestricted Upload of File with Dangerous Type

An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A specially crafted web serv...

PT-2017-16841

Name of the Vulnerable Software and Affected Versions CODESYS Web Server versions 2.3 and prior Description A Stack Buffer Overflow issue was discovered in the CODESYS Web Server, which is part of the CODESYS WebVisu web browser visualization software. This issue can be exploited by providing...

PT-2017-16843

Name of the Vulnerable Software and Affected Versions CODESYS Web Server versions 2.3 and prior Description An Arbitrary File Upload issue was discovered, allowing a specially crafted web server request to upload arbitrary files to the CODESYS Web Server without authorization, potentially enablin...

Smart Software Solutions CoDeSys Webserver URI Copying Stack Buffer Overflow

Added: 12/16/2011 CVE: CVE-2011-5007 BID: 50849 OSVDB: 77387 Background Smart Software Solutions GmbH 3S manufactures CoDeSys Web Server, a Supervisory Control and Data Acquisition/Human-Machine Interface SCADA/HMI product. The SCADA Web Server listens on TCP port 8080. Problem The CmpWebServer.d...