Critical ICSA-17-087-02 2 CVEs

3S-Smart Software Solutions GmbH CODESYS Web Server

Published Mar 28, 2017 · Updated Mar 28, 2017

Vendor: 3S-Smart Software Solutions Product: CODESYS Web Server

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 2

Unscored —

CVE-2017-6025

A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following vers…

May 19, 2017
Unscored —

CVE-2017-6027

An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following ver…

May 19, 2017

Revision history

2017-03-28 #1
ICSA-17-087-02 3S-Smart Software Solutions GmbH CODESYS Web Server

References

ICS Advisory ICSA-17-087-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-087-02
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-087-02