CVE-2018-5440
Critical
Description
A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request may cause a buffer overflow and could therefore execute arbitrary code on the web server or lead to a denial-of-service condition due to a crash in the web server.
SeverityCritical
CVSS9.8
Exploit probability—
Product3s-software Codesys Runtime System
PublishedFeb 15, 2018
First seenFeb 15, 2018
Weakness typeCWE-121CWE-121
How to fix
Update
- 3s-software codesys_runtime_system1.1.9.19 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3s-software codesys_runtime_system | v < 1.1.9.19 | 1.1.9.19 |
| 3s-software codesys_web_server | 2.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.