CVE-2021-34596: falha de média gravidade em CODESYS V2
CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service
Publicada em · Atualizada em
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.9%
probabilidade de exploração
0.9%top 43% das CVEs
exploração observada
nãonenhuma fonte reporta
A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
CODESYS · CODESYS V2CVEs relacionadas — CODESYS V2
No mesmo produto, das mais perigosas para as menos.
CVE-2021-34586HIGHCODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)EPSS 14.1%CVE-2021-34583HIGHCODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)EPSS 8.4%CVE-2021-34593HIGHCODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-serviceEPSS 2.7%CVE-2021-34584CRITICALCODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)EPSS 1.1%CVE-2021-34585HIGHCODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)EPSS 0.9%CVE-2021-34595HIGHCODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-serviceEPSS 0.9%