CVE-2021-34583
Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
- Score
- CVSS 3.1 7.5 High
- Status
- Analyzed - info@cert.vde.com
- Published
- 2021-10-26
- Last modified
- 2024-09-16
- Weaknesses
- CWE-122, CWE-787
Affected products
- Codesys (Codesys)
- Codesys V2 (Codesys)
- 750-8202 Firmware (Wago)
- 750-8203 Firmware (Wago)
- 750-8204 Firmware (Wago)
- 750-8206 Firmware (Wago)
- 750-8207 Firmware (Wago)
- 750-8208 Firmware (Wago)
- 750-8210 Firmware (Wago)
- 750-8211 Firmware (Wago)
- 750-8212 Firmware (Wago)
- 750-8213 Firmware (Wago)
- 750-8214 Firmware (Wago)
- 750-8216 Firmware (Wago)
- 750-8217 Firmware (Wago)
- 750-823 Firmware (Wago)
- 750-829 Firmware (Wago)
- 750-831 Firmware (Wago)
- 750-832 Firmware (Wago)
- 750-852 Firmware (Wago)
- 750-862 Firmware (Wago)
- 750-880 Firmware (Wago)
- 750-881 Firmware (Wago)
- 750-882 Firmware (Wago)
- 750-885 Firmware (Wago)
- 750-889 Firmware (Wago)
- 750-890 Firmware (Wago)
- 750-891 Firmware (Wago)
- 750-893 Firmware (Wago)
References
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&downloa…
- https://www.tenable.com/security/research/tra-2021-47
