Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2021-34595

CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS CODESYS V2

  • Runtime Toolkit 32 bit full to < V2.4.7.56affected
  • PLCWinNT to < V2.4.7.56affected

References