CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2021-34584

CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)

Status: Published
Published: 2021-10-26
Updated: 2024-09-16
Assigning organization: CERTVDE

Description

Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS CODESYS V2

all web servers to < V1.1.9.22affected

References

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download= ↗
https://www.tenable.com/security/research/tra-2021-47 ↗