Description
Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow.
Advisories 1
- ICSA-12-006-01 3S CoDeSys Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025
References
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf
- 20111129 Vulnerabilities in 3S CoDeSys 3.4 SP4 Patch 2 mailing-list
- 47018 third-party-advisory
- http://aluigi.altervista.org/adv/codesys_1-adv.txt
- 77386 vdb-entry
- codesys-gatewayservice-bo(71531) vdb-entry