CVE-2021-34585
PoC —CVSS 3.1
7.5 high
EPSS
<1%p59
Published
()
Modified
Description
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.
- Vendors
- wagocodesys
- Products
- 750-823 firmware, 750-829 firmware, 750-831 firmware, 750-832 firmware, 750-852 firmware, 750-862 firmware, 750-880 firmware, 750-881 firmware, 750-882 firmware, 750-885 firmware, 750-889 firmware, 750-890 firmware
- Weakness
- CWE-252
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.