3S CoDeSys Vulnerabilities

Overview This advisory is a follow-up to the alert update, ICS-ALERT-11-336-01A 3S CoDeSys Vulnerabilities, which was released on the ICS-CERT Web page on December 02, 2011. Security researcher Celil Unuver SignalSec LLC and independent researcher Luigi Auriemma have identified vulnerabilities in...

Smart Software Solutions CoDeSys ControlService Stack Buffer Overflow (CVE-2011-5007)

A stack buffer overflow vulnerability has been reported in Smart Software Solutions CoDeSys...

CVE-2011-5007

CVE-2011-5007 is a stack-based buffer overflow in the 3S CoDeSys WebServer (CmpWebServer.dll) used by ABB AC500 PLC and other products. An overly long URI sent to port 8080 can overflow a stack buffer and allow a remote attacker to potentially execute arbitrary code. Affected versions include CoD...

Codesys CmpWebServer Multiple Vulnerabilities

Codesys is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...