CVE-2021-34583highCWE-122

CVE-2021-34583: high-severity vulnerability in CODESYS V2

CODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)

Published · Updated

Follow this CVE+ Monitor CODESYS V2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 8.8%
In short

The CODESYS V2 web server has a flaw where specially crafted web requests can cause it to crash due to a memory overflow, making the server unavailable to legitimate users.

Technical detail

A heap-based buffer overflow vulnerability in CODESYS V2 web server (versions before V1.1.9.22) can be triggered via specially crafted HTTP requests, resulting in a denial-of-service condition through application crash. The vulnerability requires network access to the web server but no authentication or special conditions.

Summary generated and translated by AI from the official description.
Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
CODESYS · CODESYS V2
Related CVEs — CODESYS V2

In the same product, most dangerous first.

CVE-2021-34586HIGHCODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)EPSS 13.7%CVE-2021-34593HIGHCODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-serviceEPSS 2.7%CVE-2021-34584CRITICALCODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)EPSS 1.1%CVE-2021-34585HIGHCODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)EPSS 0.9%CVE-2021-34595HIGHCODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-serviceEPSS 0.9%CVE-2021-34596MEDIUMCODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-serviceEPSS 0.8%