CVE-2019-13548
13.09.2019, 17:15
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.Enginsight
| Vendor | Product | Version |
|---|---|---|
| codesys | control_for_beaglebone | 𝑥 < 3.5.14.10 |
| codesys | control_for_empc-a\/imx6 | 𝑥 < 3.5.14.10 |
| codesys | control_for_iot2000 | 𝑥 < 3.5.14.10 |
| codesys | control_for_linux | 𝑥 < 3.5.14.10 |
| codesys | control_for_pfc100 | 𝑥 < 3.5.14.10 |
| codesys | control_for_pfc200 | 𝑥 < 3.5.14.10 |
| codesys | control_for_raspberry_pi | 𝑥 < 3.5.14.10 |
| codesys | control_rte | 3.5.8.60 ≤ 𝑥 < 3.5.12.80 |
| codesys | control_rte | 3.5.13.0 ≤ 𝑥 < 3.5.14.10 |
| codesys | control_runtime_system_toolkit | 3.0 ≤ 𝑥 < 3.5.12.80 |
| codesys | control_win | 3.5.9.80 ≤ 𝑥 ≤ 3.5.12.80 |
| codesys | control_win | 3.5.13.0 ≤ 𝑥 < 3.5.14.10 |
| codesys | embedded_target_visu_toolkit | 3.0 ≤ 𝑥 < 3.5.12.80 |
| codesys | hmi | 3.5.10.0 ≤ 𝑥 < 3.5.12.80 |
| codesys | hmi | 3.5.13.0 ≤ 𝑥 < 3.5.14.10 |
| codesys | remote_target_visu_toolkit | 3.0 ≤ 𝑥 < 3.5.12.80 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-121 - Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.