CVE-2015-6460

Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
VendorProductVersion
3s-smartcodesys_gateway_server
𝑥
< 2.3.9.34
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://zerodayinitiative.com/advisories/ZDI-15-441/
http://zerodayinitiative.com/advisories/ZDI-15-442/
https://ics-cert.us-cert.gov/advisories/ICSA-15-258-02
http://zerodayinitiative.com/advisories/ZDI-15-441/
http://zerodayinitiative.com/advisories/ZDI-15-442/
https://ics-cert.us-cert.gov/advisories/ICSA-15-258-02