CVE-2011-5007 Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitr...
HighCVSS 10.0
EPSS 72.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3ssoftware codesys | <= 3.4 | No fix listed |
References
- aluigi.altervista.org
- ics-cert.us-cert.gov
- 77387 vdb-entry
- 20111129 Vulnerabilities in 3S CoDeSys 3.4 SP4 Patch 2 mailing-list
- 47018 third-party-advisory vendor-advisory
- 18187 exploit
- www.us-cert.gov us-government-resource
- www.us-cert.gov us-government-resource