ZeroHour

CVE-2021-34595

CVSS 3.1
8.1 high
EPSS
<1%p57
Published
()
Modified
Description

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.

Vendors
wagocodesys
Products
750-823 firmware, 750-829 firmware, 750-831 firmware, 750-832 firmware, 750-852 firmware, 750-862 firmware, 750-880 firmware, 750-881 firmware, 750-882 firmware, 750-885 firmware, 750-889 firmware, 750-890 firmware
Weakness
CWE-823, CWE-119
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

In the news

No ingested article mentions this CVE yet.