CVE-2021-34596CWE-824

CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service

Medium · published October 26, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00832 · 57.2th percentile
Weakness
CWE-824 · Access of Uninitialized Pointer
Published
2021-10-26T09:55Z
EPSS history
Timeline
  • 26 OCT 09:55Z
    CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service
    cvelistv5