3S CODESYS Gateway-Server Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-4708US | high10.0 | — | ||
Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet. | ||||
| CVE-2012-4707US | high10.0 | — | ||
3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access. | ||||
| CVE-2012-4706US | high7.8 | — | ||
Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer ov… | ||||
| CVE-2012-4705US | high10.0 | Exploit | ||
Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname. | ||||
| CVE-2012-4704US | high10.0 | — | ||
Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-13-050-01A JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-13-050-01A - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (5)
- MitigationGateway-Server
3S has produced a security patch that mitigates these vulnerabilities. The patch is available on the download site for CODESYS: CODESYS V2.3.9.38
- MitigationGateway-Server
3S has produced a security patch that mitigates these vulnerabilities. The patch is available on the download site for CODESYS: CODESYS V2.3.9.38
- MitigationGateway-Server
3S has produced a security patch that mitigates these vulnerabilities. The patch is available on the download site for CODESYS: CODESYS V2.3.9.38
- MitigationGateway-Server
3S has produced a security patch that mitigates these vulnerabilities. The patch is available on the download site for CODESYS: CODESYS V2.3.9.38
- MitigationGateway-Server
3S has produced a security patch that mitigates these vulnerabilities. The patch is available on the download site for CODESYS: CODESYS V2.3.9.38
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan