CODESYS Gateway Server (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS GmbH Equipment: CODESYS Gateway Server Vulnerability: Heap Based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-15-258-02 3S...

CoDeSys Gateway Server Opcode 0x3ef Heap Buffer Overflow (CVE-2015-6460)

A heap buffer overflow vulnerability exists in 3S Smart Software CoDeSys due to insufficient input validation. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request message to the vulnerable service. Successful exploitation could result in code execution ...

CVE-2015-6460

CVE-2015-6460 affects the CODESYS Gateway Server. Multiple heap-based buffer overflow vulnerabilities in the Gateway Server allow remote code execution via crafted inputs targeting opcodes 0x3ef and 0x3f0. Affected products are CODESYS Gateway Server versions prior to 2.3.9.34 (ICS advisory notes...