CVE-2021-29241

—

CVSS 3.1

7.5 high

EPSS

1%p71

Published

May 3, 2021 (May 3, 2021)

Modified

Jun 17, 2026

Description

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).

Vendors: codesys
Products: control for beaglebone sl, control for empc-a\/imx6 sl, control for iot2000 sl, control for linux sl, control for pfc100 sl, control for pfc200 sl, control for raspberry pi sl, control runtime system toolkit, development system, edge gateway, gateway
Weakness: CWE-476
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news1 stories

Several New Critical Flaws Affect CODESYS Industrial Automation Software

The Hacker NewsJul 22, 03:38 UTC · Jul 22, 2021Ransomware CVE-2021-29238 CVE-2021-29240 CVE-2021-29241+6 CVEs

60