ICSA-17-087-02

icsaUScisa_csaf_ot

3S-Smart Software Solutions GmbH CODESYS Web Server

Advisory ansehen veröffentlicht 2017-03-28

ATTENTION: Remotely exploitable/low skill level to exploit.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2017-6027UScritical9.8—
An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web…
CVE-2017-6025UScritical9.8—
A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web b…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (2)

  • MitigationCODESYS Web Server

    3S-Smart Software Solutions GmbH recommends that device manufacturers who program their devices with CODESYS refer to the device directory to determine if they may be affected. The device directory can be found at the following location:

    http://devices.codesys.com/device-directory.html
  • MitigationCODESYS Web Server

    3S-Smart Software Solutions GmbH recommends that device manufacturers who program their devices with CODESYS refer to the device directory to determine if they may be affected. The device directory can be found at the following location:

    http://devices.codesys.com/device-directory.html
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan