CVE-2021-34593CWE-755

CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service

High · published October 26, 2021

CVSS v3.1
7.5
EPSS
3%
Percentile
85.6
In the wild
Unconfirmed
What it is

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing the PLC.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02662 · 85.6th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2021-10-26T09:55Z
EPSS history
Timeline
  • 26 OCT 09:55Z
    CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service
    cvelistv5