Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

codesys gateway-server vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2012-4707
3S CODESYS Gateway-Server prior to 2.3.9.27 allows remote malicious users to execute arbitrary code via vectors that trigger an out-of-bounds memory access.
3s-software Codesys Gateway-server 2.3.93s-software Codesys Gateway-server 2.3.8.13s-software Codesys Gateway-server 2.3.8.23s-software Codesys Gateway-server 2.3.9.13s-software Codesys Gateway-server 2.3.9.23s-software Codesys Gateway-server 2.3.8.03s-software Codesys Gateway-server 2.3.5.13s-software Codesys Gateway-server3s-software Codesys Gateway-server 2.3.9.183s-software Codesys Gateway-server 2.3.9.53s-software Codesys Gateway-server 2.3.5.23s-software Codesys Gateway-server 2.3.5.33s-software Codesys Gateway-server 2.3.9.43s-software Codesys Gateway-server 2.3.9.33s-software Codesys Gateway-server 2.3.6.03s-software Codesys Gateway-server 2.3.7.0
10
CVSSv2
CVE-2012-4705
Directory traversal vulnerability in 3S CODESYS Gateway-Server prior to 2.3.9.27 allows remote malicious users to execute arbitrary code via vectors involving a crafted pathname.
3s-software Codesys Gateway-server 2.3.9.13s-software Codesys Gateway-server 2.3.8.23s-software Codesys Gateway-server 2.3.5.13s-software Codesys Gateway-server 2.3.93s-software Codesys Gateway-server 2.3.9.193s-software Codesys Gateway-server 2.3.9.33s-software Codesys Gateway-server 2.3.9.23s-software Codesys Gateway-server 2.3.5.33s-software Codesys Gateway-server 2.3.5.23s-software Codesys Gateway-server 2.3.9.183s-software Codesys Gateway-server 2.3.8.13s-software Codesys Gateway-server 2.3.8.03s-software Codesys Gateway-server3s-software Codesys Gateway-server 2.3.9.53s-software Codesys Gateway-server 2.3.9.43s-software Codesys Gateway-server 2.3.7.03s-software Codesys Gateway-server 2.3.6.0
10
CVSSv2
CVE-2012-4704
Array index error in 3S CODESYS Gateway-Server prior to 2.3.9.27 allows remote malicious users to execute arbitrary code via a crafted packet.
3s-software Codesys Gateway-server 2.3.9.183s-software Codesys Gateway-server 2.3.8.13s-software Codesys Gateway-server 2.3.8.03s-software Codesys Gateway-server3s-software Codesys Gateway-server 2.3.9.13s-software Codesys Gateway-server 2.3.8.23s-software Codesys Gateway-server 2.3.5.13s-software Codesys Gateway-server 2.3.93s-software Codesys Gateway-server 2.3.9.193s-software Codesys Gateway-server 2.3.9.53s-software Codesys Gateway-server 2.3.9.43s-software Codesys Gateway-server 2.3.7.03s-software Codesys Gateway-server 2.3.6.03s-software Codesys Gateway-server 2.3.9.33s-software Codesys Gateway-server 2.3.9.23s-software Codesys Gateway-server 2.3.5.33s-software Codesys Gateway-server 2.3.5.2
10
CVSSv2
CVE-2012-4708
Stack-based buffer overflow in 3S CODESYS Gateway-Server prior to 2.3.9.27 allows remote malicious users to execute arbitrary code via a crafted packet.
3s-software Codesys Gateway-server 2.3.9.23s-software Codesys Gateway-server 2.3.9.13s-software Codesys Gateway-server 2.3.5.23s-software Codesys Gateway-server 2.3.5.13s-software Codesys Gateway-server 2.3.9.43s-software Codesys Gateway-server 2.3.9.33s-software Codesys Gateway-server 2.3.6.03s-software Codesys Gateway-server 2.3.5.33s-software Codesys Gateway-server 2.3.8.23s-software Codesys Gateway-server 2.3.8.13s-software Codesys Gateway-server 2.3.93s-software Codesys Gateway-server 2.3.9.193s-software Codesys Gateway-server 2.3.9.183s-software Codesys Gateway-server 2.3.9.53s-software Codesys Gateway-server 2.3.8.03s-software Codesys Gateway-server 2.3.7.03s-software Codesys Gateway-server
7.8
CVSSv2
CVE-2012-4706
Integer signedness error in 3S CODESYS Gateway-Server prior to 2.3.9.27 allows remote malicious users to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow.
3s-software Codesys Gateway-server 2.3.9.13s-software Codesys Gateway-server 2.3.8.23s-software Codesys Gateway-server 2.3.5.13s-software Codesys Gateway-server 2.3.93s-software Codesys Gateway-server 2.3.9.33s-software Codesys Gateway-server 2.3.9.23s-software Codesys Gateway-server 2.3.5.33s-software Codesys Gateway-server 2.3.5.23s-software Codesys Gateway-server 2.3.9.183s-software Codesys Gateway-server 2.3.8.13s-software Codesys Gateway-server 2.3.8.03s-software Codesys Gateway-server 2.3.9.193s-software Codesys Gateway-server3s-software Codesys Gateway-server 2.3.9.53s-software Codesys Gateway-server 2.3.9.43s-software Codesys Gateway-server 2.3.7.03s-software Codesys Gateway-server 2.3.6.0
7.5
CVSSv2
CVE-2015-6460
Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server prior to 2.3.9.34 allow remote malicious users to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.
3s-smart Codesys Gateway Server
10
CVSSv2
CVE-2013-2781
Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote malicious users to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
3s-software Codesys Gateway-server 2.3.9.27
5
CVSSv2
CVE-2015-6484
3S-Smart CODESYS Gateway Server prior to 2.3.9.48 allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted (1) GET or (2) POST request.
3s-smart Software Solutions Codesys Gateway Server
5
CVSSv2
CVE-2022-31803
In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated malicious user to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server...
Codesys Gateway
5
CVSSv2
CVE-2022-31804
The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.
Codesys Gateway
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook