high8.1
CVE-2021-34595
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions…
Impact
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 750-823 Firmware | before fw10 |
| Wago | 750-829 Firmware | before fw17 |
| Wago | 750-831 Firmware | before fw17 |
| Wago | 750-832 Firmware | before fw10 |
| Wago | 750-852 Firmware | before fw17 |
| Wago | 750-862 Firmware | before fw10 |
| Wago | 750-880 Firmware | before fw17 |
| Wago | 750-881 Firmware | before fw17 |
| Wago | 750-882 Firmware | before fw17 |
| Wago | 750-885 Firmware | before fw17 |
| Wago | 750-889 Firmware | before fw17 |
| Wago | 750-890 Firmware | before fw10 |