Skip to content
OpenAdvisories
Critical ICSA-21-173-03 3 CVEs

CODESYS Control V2 communication

Published Jun 22, 2021 · Updated Jun 22, 2021

Vendor: CODESYS Product: PLCWinNT Product: Runtime Toolkit 32 bit full

Summary

Successful exploitation of these vulnerabilities may cause a heap-based buffer overflow, a stack-based buffer overflow, or a buffer over-read in the affected CODESYS products. This could result in a denial-of-service condition or allow remote code execution.

Vulnerabilities 3

  • Unscored —
    CVE-2021-30186

    CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.

  • Unscored —
    CVE-2021-30188

    CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.

  • Unscored —
    CVE-2021-30195

    CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.

Revision history

  1. #1

    ICSA-21-173-03 CODESYS Control V2 communication

References