CVE-2011-5008 Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-base...
HighCVSS 7.5
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3ssoftware codesys | = 3.4-sp4 | No fix listed |
References
- aluigi.altervista.org
- 20111129 Vulnerabilities in 3S CoDeSys 3.4 SP4 Patch 2 mailing-list
- 47018 third-party-advisory vendor-advisory
- 77386 vdb-entry
- www.us-cert.gov exploit us-government-resource
- codesys-gatewayservice-bo(71531) vdb-entry