high7.5
CVE-2021-34583
Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 …
Impact
Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 750-8214 Firmware | before fw20 |
| Wago | 750-8216 Firmware | before fw20 |
| Wago | 750-8217 Firmware | before fw20 |
| Wago | 750-8213 Firmware | before fw20 |
| Wago | 750-8212 Firmware | before fw20 |
| Wago | 750-8211 Firmware | before fw20 |
| Wago | 750-8210 Firmware | before fw20 |
| Wago | 750-8208 Firmware | before fw20 |
| Wago | 750-8207 Firmware | before fw20 |
| Wago | 750-8206 Firmware | before fw20 |
| Wago | 750-8204 Firmware | before fw20 |
| Wago | 750-8203 Firmware | before fw20 |
Weakness classification
References
- NVD record
- CVE.org record
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=
- https://www.tenable.com/security/research/tra-2021-47
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=
- https://www.tenable.com/security/research/tra-2021-47