Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-34585

CODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS CODESYS V2

  • all web servers to < V1.1.9.22affected

References