CVE-2011-5007

no score yetEPSS 73%

Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.

EPSS: 73% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2011-12-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

3ssoftware:codesys

References

http://aluigi.altervista.org/adv/codesys_1-adv.txt
http://ics-cert.us-cert.gov/advisories/ICSA-12-320-01
http://osvdb.org/77387
http://seclists.org/bugtraq/2011/Nov/178
http://secunia.com/advisories/47018

Check your stack JSON