high7.5
CVE-2021-34585
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error.
Impact
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 750-823 Firmware | before fw10 |
| Wago | 750-829 Firmware | before fw17 |
| Wago | 750-831 Firmware | before fw17 |
| Wago | 750-832 Firmware | before fw10 |
| Wago | 750-852 Firmware | before fw17 |
| Wago | 750-862 Firmware | before fw10 |
| Wago | 750-880 Firmware | before fw17 |
| Wago | 750-881 Firmware | before fw17 |
| Wago | 750-882 Firmware | before fw17 |
| Wago | 750-885 Firmware | before fw17 |
| Wago | 750-889 Firmware | before fw17 |
| Wago | 750-890 Firmware | before fw10 |
Weakness classification
References
- NVD record
- CVE.org record
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=
- https://www.tenable.com/security/research/tra-2021-47
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=
- https://www.tenable.com/security/research/tra-2021-47