CVE-2021-30188

CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow...

Out-of-bounds

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write...

Input validation

CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input...

Input validation

CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation...

Security feature bypass

CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...

CVE-2021-30194

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read...

Heap overflow

CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...

CVE-2021-30186

CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...

CVE-2021-30195

CVE-2021-30195 affects the CODESYS V2 runtime system prior to 2.4.7.55. The vulnerability is caused by Improper Input Validation, leading to an out-of-bounds read that can cause a denial-of-service. Affected components are the CODESYS Runtime Toolkit 32‑bit full and PLCWinNT prior to 2.4.7.55. Mi...

CVE-2021-30195

CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation...

CVE-2021-30188

CVE-2021-30188 affects the CODESYS V2 runtime system SPs prior to 2.4.7.55. A stack-based buffer overflow in the affected runtime (stack-based CWE-121) can lead to denial of service and, in some cases, remote code execution. Public sources consistently identify the vulnerable component as the COD...

CVE-2021-30188

CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow...

CVE-2021-30186

CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...

CVE-2021-30186

CVE-2021-30186 affects CODESYS V2 runtime system SP prior to 2.4.7.55, where a heap-based buffer overflow is triggered by a crafted request. Public sources describe this as a vulnerability in the CODESYS Runtime Toolkit/PLCWinNT stack, enabling denial-of-service and, per ICS background, potential...

CVE-2021-30187

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...

CVE-2021-30187

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...

Command injection

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...

CVE-2021-30194

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read...

CVE-2021-30194

CVE-2021-30194 applies to CODESYS V2 Web-Server prior to 1.1.9.20, with an Out-of-bounds Read vulnerability in the web server component. Public sources in connected documents confirm affected product/version and impact (read arbitrary memory; potential crash). CODESYS has released version 1.1.9.2...

CVE-2021-30193

CVE-2021-30193 affects CODESYS V2 Web-Server before 1.1.9.20. The vulnerability is an Out-of-bounds Write in the web server component, enabling crafted requests to write to arbitrary memory in the CODESYS Control runtime (potential remote code execution or crash). Affected products include CODESY...