CVE-2015-6460 Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.
HighCVSS 7.5
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3s-smart codesys gateway server | < 2.3.9.34 | 2.3.9.34 |
| CODESYS 3S-Smart CODESYS Gateway Server | >= V2, < 2.3.9.34 | 2.3.9.34 |
References
- zerodayinitiative.com third-party-advisory vdb-entry
- zerodayinitiative.com third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource