Published: 25/12/2011 Updated: 29/08/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 510

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote malicious users to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method.

Vulnerable Product	Search on Vulmon	Subscribe to Product
3ssoftware codesys 3.4

source: wwwsecurityfocuscom/bid/50854/info CoDeSys is prone to multiple denial-of-service vulnerabilities An attacker can exploit these issues to crash the application and deny service to legitimate users udpsz -T -c "POST / HTTP/10\r\nContent-Length: 4294967295\r\n\r\n" SERVER 8080 -1 ...

source: wwwsecurityfocuscom/bid/50854/info CoDeSys is prone to multiple denial-of-service vulnerabilities An attacker can exploit these issues to crash the application and deny service to legitimate users udpsz -T -c "BLAH / HTTP/10\r\n\r\n" SERVER 8080 -1 ...

NVD-CWE-Other http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf http://www.osvdb.org/77389 http://www.osvdb.org/77388 http://secunia.com/advisories/47018 http://seclists.org/bugtraq/2011/Nov/178 http://aluigi.altervista.org/adv/codesys_1-adv.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/71533 https://nvd.nist.gov https://www.exploit-db.com/exploits/36377/

CVE-2011-5009

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect