CVE-2019-13548
—CVSS 3.1
9.8 critical
EPSS
6%p93
Published
()
Modified
Description
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.
- Vendors
- codesys
- Products
- control for beaglebone, control for empc-a\/imx6, control for iot2000, control for linux, control for pfc100, control for pfc200, control for raspberry pi, control rte, control runtime system toolkit, control win, embedded target visu toolkit, hmi
- Weakness
- CWE-121, CWE-787
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.