ICSA-17-087-02

icsaUScisa_csaf_ot

3S-Smart Software Solutions GmbH CODESYS Web Server

view advisory published 2017-03-28

ATTENTION: Remotely exploitable/low skill level to exploit.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2017-6027UScritical9.8—
An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web…
CVE-2017-6025UScritical9.8—
A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web b…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • MitigationCODESYS Web Server

    3S-Smart Software Solutions GmbH recommends that device manufacturers who program their devices with CODESYS refer to the device directory to determine if they may be affected. The device directory can be found at the following location:

    http://devices.codesys.com/device-directory.html
  • MitigationCODESYS Web Server

    3S-Smart Software Solutions GmbH recommends that device manufacturers who program their devices with CODESYS refer to the device directory to determine if they may be affected. The device directory can be found at the following location:

    http://devices.codesys.com/device-directory.html
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan