Description (CNA)
Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CODESYS / 3S-Smart CODESYS Gateway Server | affected V2 before 2.3.9.34 |
CWE
No CWE identifiers supplied.
References
- http://zerodayinitiative.com/advisories/ZDI-15-442/
- http://zerodayinitiative.com/advisories/ZDI-15-441/
- https://ics-cert.us-cert.gov/advisories/ICSA-15-258-02
ADP enrichment
No English description supplied.