CVE-2017-6027

CVE-2017-6027 affects CODESYS Web Server (WebVisu) versions 2.3 and earlier. A specially crafted request can upload arbitrary files of dangerous types to the server without authorization, potentially enabling remote code execution. The issue is documented in multiple sources (NVD/NVD-related entr...

3S-Smart Software Solutions GmbH CODESYS Web Server

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: 3S-Smart Software Solutions GmbH Equipment: CODESYS Web Server Vulnerabilities: Arbitrary File Upload, Stack Buffer Overflow AFFECTED PRODUCTS The following versions of CODESYS Web Server, part of the CODESYS WebVisu...