CVE-2021-34595
26.10.2021, 10:15
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.Enginsight
| Vendor | Product | Version |
|---|---|---|
| codesys | plcwinnt | 𝑥 < 2.4.7.56 |
| codesys | runtime_toolkit | 𝑥 < 2.4.7.56 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-823 - Use of Out-of-range Pointer OffsetThe program performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.