Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2011-5058

Disclosure Date: January 10, 2012 (last updated October 04, 2023)
The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ (backslash) characters in an HTTP GET request.
0
0
Attacker Value
Unknown

CVE-2011-5008

Disclosure Date: December 25, 2011 (last updated October 04, 2023)
Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow.
0
0
Attacker Value
Unknown

CVE-2011-5009

Disclosure Date: December 25, 2011 (last updated October 04, 2023)
The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method.
0
0