CVE-2021-34583CWE-122

CODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)

High · published October 26, 2021

CVSS v3.1
7.5
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.08841 · 95.2th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2021-10-26T09:55Z
EPSS history
Timeline
  • 26 OCT 09:55Z
    CODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)
    cvelistv5