CVE-2021-34595CWE-823
CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service
High · published October 26, 2021
What it is
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.
The record
Technical detail
- CVSS v3.1
- 8.1 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00855 · 58.0th percentile
- Weakness
- CWE-823 · Use of Out-of-range Pointer Offset
- Published
- 2021-10-26T09:55Z
EPSS history
Timeline