ICSA-21-173-02

icsaUScisa_csaf_ot

CODESYS V2 web server

Advisory ansehen veröffentlicht 2021-06-22

Successful exploitation of these vulnerabilities may allow an attacker to read or write arbitrary memory or files in the CODESYS Control runtime system, cause invalid memory accesses to execute code, or crash the CODESYS web server or CODESYS Control runtime system.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-30194UScritical9.1—
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.
CVE-2021-30193UScritical9.8—
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.
CVE-2021-30192UScritical9.8OT erhöht—
CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.
CVE-2021-30191UShigh7.5—
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
CVE-2021-30190UScritical9.8OT erhöht—
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
CVE-2021-30189UScritical9.8—
CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

  • MitigationCODESYS reports all CODESYS V2 web servers running stand-alone or as part of the CODESYS runtime system

    Activate and apply user management and password features.

  • MitigationCODESYS reports all CODESYS V2 web servers running stand-alone or as part of the CODESYS runtime system

    Activate and apply user management and password features.

  • MitigationCODESYS reports all CODESYS V2 web servers running stand-alone or as part of the CODESYS runtime system

    Activate and apply user management and password features.

  • MitigationCODESYS reports all CODESYS V2 web servers running stand-alone or as part of the CODESYS runtime system

    Activate and apply user management and password features.

  • MitigationCODESYS reports all CODESYS V2 web servers running stand-alone or as part of the CODESYS runtime system

    Activate and apply user management and password features.

  • MitigationCODESYS reports all CODESYS V2 web servers running stand-alone or as part of the CODESYS runtime system

    Activate and apply user management and password features.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan