Skip to content
OpenAdvisories
Critical VDE-2021-055 10 CVEs

Pilz: PMC programming tool 2.x.x affected by multiple vulnerabilities

Published Apr 26, 2022 · Updated Apr 26, 2022

Vendor: Pilz Product: PMC programming tool 2.x.x

Summary

The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a worst case, attackers could execute arbitrary program code on the PC on which the PMC programming tool is used.

Details

In a worst case, attackers could execute arbitrary program code on the PC on which the PMC programming tool is used.

Vulnerabilities 10

  • High 8.1
    CVE-2021-34595

    CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service

    A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.

    CODESYS CODESYS V2 ICS / OT
  • High 7.5
    CVE-2021-34593

    CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service

    In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication…

    CODESYS CODESYS V2 ICS / OT
  • Medium 6.5
    CVE-2021-34596

    CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service

    A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition.

    CODESYS CODESYS V2 ICS / OT
  • Unscored —
    CVE-2019-16265

    CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow.

  • Unscored —
    CVE-2020-14509

    Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mech…

  • Unscored —
    CVE-2020-14513

    CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted lice…

  • Unscored —
    CVE-2020-14515

    CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in…

  • Unscored —
    CVE-2020-14517

    Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90…

  • Unscored —
    CVE-2020-14519

    This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are …

  • Unscored —
    CVE-2020-16233

    An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back pack…

Revision history

  1. #1

    Initial revision.

References