Skip to content
OpenAdvisories
Critical ICSA-21-173-02 6 CVEs

CODESYS V2 web server

Published Jun 22, 2021 · Updated Jun 22, 2021

Vendor: CODESYS Product: reports all CODESYS V2 web servers running stand-alone or as part of the CODESYS runtime system

Summary

Successful exploitation of these vulnerabilities may allow an attacker to read or write arbitrary memory or files in the CODESYS Control runtime system, cause invalid memory accesses to execute code, or crash the CODESYS web server or CODESYS Control runtime system.

Vulnerabilities 6

  • Unscored —
    CVE-2021-30189

    CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.

  • Unscored —
    CVE-2021-30190

    CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.

  • Unscored —
    CVE-2021-30191

    CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.

  • Unscored —
    CVE-2021-30192

    CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.

  • Unscored —
    CVE-2021-30193

    CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.

  • Unscored —
    CVE-2021-30194

    CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.

Revision history

  1. #1

    ICSA-21-173-02 CODESYS V2 web server

References