|
2021-05-25
|
CVE-2021-30194
|
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.
|
V2_web_server, 750\-8202_firmware, 750\-8203_firmware, 750\-8204_firmware, 750\-8206_firmware, 750\-8207_firmware, 750\-8208_firmware, 750\-8210_firmware, 750\-8211_firmware, 750\-8212_firmware, 750\-8213_firmware, 750\-8214_firmware, 750\-8216_firmware, 750\-8217_firmware, 750\-823_firmware, 750\-829_firmware, 750\-831_firmware, 750\-832_firmware, 750\-852_firmware, 750\-862_firmware, 750\-880_firmware, 750\-881_firmware, 750\-882_firmware, 750\-885_firmware, 750\-889_firmware, 750\-890_firmware, 750\-891_firmware, 750\-893_firmware
|
9.1
|
|
|
|
2021-05-25
|
CVE-2021-30195
|
CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.
|
Plcwinnt, Runtime_toolkit, 750\-8202_firmware, 750\-8203_firmware, 750\-8204_firmware, 750\-8206_firmware, 750\-8207_firmware, 750\-8208_firmware, 750\-8210_firmware, 750\-8211_firmware, 750\-8212_firmware, 750\-8213_firmware, 750\-8214_firmware, 750\-8216_firmware, 750\-8217_firmware, 750\-823_firmware, 750\-829_firmware, 750\-831_firmware, 750\-832_firmware, 750\-852_firmware, 750\-862_firmware, 750\-880_firmware, 750\-881_firmware, 750\-882_firmware, 750\-885_firmware, 750\-889_firmware, 750\-890_firmware, 750\-891_firmware, 750\-893_firmware
|
7.5
|
|
|
|
2021-10-26
|
CVE-2021-34583
|
Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
|
Codesys, 750\-8202_firmware, 750\-8203_firmware, 750\-8204_firmware, 750\-8206_firmware, 750\-8207_firmware, 750\-8208_firmware, 750\-8210_firmware, 750\-8211_firmware, 750\-8212_firmware, 750\-8213_firmware, 750\-8214_firmware, 750\-8216_firmware, 750\-8217_firmware, 750\-823_firmware, 750\-829_firmware, 750\-831_firmware, 750\-832_firmware, 750\-852_firmware, 750\-862_firmware, 750\-880_firmware, 750\-881_firmware, 750\-882_firmware, 750\-885_firmware, 750\-889_firmware, 750\-890_firmware, 750\-891_firmware, 750\-893_firmware
|
7.5
|
|
|
|
2021-10-26
|
CVE-2021-34584
|
Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
|
Codesys, 750\-8202_firmware, 750\-8203_firmware, 750\-8204_firmware, 750\-8206_firmware, 750\-8207_firmware, 750\-8208_firmware, 750\-8210_firmware, 750\-8211_firmware, 750\-8212_firmware, 750\-8213_firmware, 750\-8214_firmware, 750\-8216_firmware, 750\-8217_firmware, 750\-823_firmware, 750\-829_firmware, 750\-831_firmware, 750\-832_firmware, 750\-852_firmware, 750\-862_firmware, 750\-880_firmware, 750\-881_firmware, 750\-882_firmware, 750\-885_firmware, 750\-889_firmware, 750\-890_firmware, 750\-891_firmware, 750\-893_firmware
|
9.1
|
|
|
|
2021-10-26
|
CVE-2021-34585
|
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.
|
Codesys, 750\-8202_firmware, 750\-8203_firmware, 750\-8204_firmware, 750\-8206_firmware, 750\-8207_firmware, 750\-8208_firmware, 750\-8210_firmware, 750\-8211_firmware, 750\-8212_firmware, 750\-8213_firmware, 750\-8214_firmware, 750\-8216_firmware, 750\-8217_firmware, 750\-823_firmware, 750\-829_firmware, 750\-831_firmware, 750\-832_firmware, 750\-852_firmware, 750\-862_firmware, 750\-880_firmware, 750\-881_firmware, 750\-882_firmware, 750\-885_firmware, 750\-889_firmware, 750\-890_firmware, 750\-891_firmware, 750\-893_firmware
|
N/A
|
|
|
|
2021-10-26
|
CVE-2021-34586
|
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.
|
Codesys, 750\-8202_firmware, 750\-8203_firmware, 750\-8204_firmware, 750\-8206_firmware, 750\-8207_firmware, 750\-8208_firmware, 750\-8210_firmware, 750\-8211_firmware, 750\-8212_firmware, 750\-8213_firmware, 750\-8214_firmware, 750\-8216_firmware, 750\-8217_firmware, 750\-823_firmware, 750\-829_firmware, 750\-831_firmware, 750\-832_firmware, 750\-852_firmware, 750\-862_firmware, 750\-880_firmware, 750\-881_firmware, 750\-882_firmware, 750\-885_firmware, 750\-889_firmware, 750\-890_firmware, 750\-891_firmware, 750\-893_firmware
|
7.5
|
|
|
|
2021-10-26
|
CVE-2021-34595
|
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.
|
Codesys, Plcwinnt, Runtime_toolkit, 750\-8202_firmware, 750\-8203_firmware, 750\-8204_firmware, 750\-8206_firmware, 750\-8207_firmware, 750\-8208_firmware, 750\-8210_firmware, 750\-8211_firmware, 750\-8212_firmware, 750\-8213_firmware, 750\-8214_firmware, 750\-8216_firmware, 750\-8217_firmware, 750\-823_firmware, 750\-829_firmware, 750\-831_firmware, 750\-832_firmware, 750\-852_firmware, 750\-862_firmware, 750\-880_firmware, 750\-881_firmware, 750\-882_firmware, 750\-885_firmware, 750\-889_firmware, 750\-890_firmware, 750\-891_firmware, 750\-893_firmware
|
8.1
|
|
|
|
2021-10-26
|
CVE-2021-34596
|
A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition.
|
Codesys, Plcwinnt, Runtime_toolkit, 750\-8202_firmware, 750\-8203_firmware, 750\-8204_firmware, 750\-8206_firmware, 750\-8207_firmware, 750\-8208_firmware, 750\-8210_firmware, 750\-8211_firmware, 750\-8212_firmware, 750\-8213_firmware, 750\-8214_firmware, 750\-8216_firmware, 750\-8217_firmware, 750\-823_firmware, 750\-829_firmware, 750\-831_firmware, 750\-832_firmware, 750\-852_firmware, 750\-862_firmware, 750\-880_firmware, 750\-881_firmware, 750\-882_firmware, 750\-885_firmware, 750\-889_firmware, 750\-890_firmware, 750\-891_firmware, 750\-893_firmware
|
6.5
|
|
|
|
2021-08-31
|
CVE-2021-34578
|
This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.
|
750\-362_firmware, 750\-363_firmware, 750\-823_firmware, 750\-832\/000\-002_firmware, 750\-832_firmware, 750\-862_firmware, 750\-890\/025\-000_firmware, 750\-890\/025\-001_firmware, 750\-890\/025\-002_firmware, 750\-890\/040\-000_firmware, 750\-891_firmware, 750\-893_firmware
|
8.1
|
|
|
|
2023-06-26
|
CVE-2023-1150
|
Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.
|
750\-362\/000\-001_firmware, 750\-362\/040\-000_firmware, 750\-362_firmware, 750\-363\/040\-000_firmware, 750\-363_firmware, 750\-364\/040\-010_firmware, 750\-365\/040\-010_firmware, 750\-823_firmware, 750\-832\/000\-002_firmware, 750\-832_firmware, 750\-862_firmware, 750\-890\/025\-000_firmware, 750\-890\/025\-001_firmware, 750\-890\/025\-002_firmware, 750\-890\/040\-000_firmware, 750\-890_firmware, 750\-891_firmware, 750\-893_firmware
|
N/A
|
|
|