CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2021-34583
High (7.5). EPSS 8.8% chance of exploitation in the next 30 days.
Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
Severity
- EPSS
- 8.8% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-122
- Published
- Modified
- Record from
- the NVD, synced
Affected
- codesys:codesys
- wago:750-8202_firmware
- wago:750-8203_firmware
- wago:750-8204_firmware
- wago:750-8206_firmware
- wago:750-8207_firmware
- wago:750-8208_firmware
- wago:750-8210_firmware
- wago:750-8211_firmware
- wago:750-8212_firmware
- wago:750-8213_firmware
- wago:750-8214_firmware
- wago:750-8216_firmware
- wago:750-8217_firmware
- wago:750-823_firmware
- wago:750-829_firmware
- wago:750-831_firmware
- wago:750-832_firmware
- wago:750-852_firmware
- wago:750-862_firmware
- wago:750-880_firmware
- wago:750-881_firmware
- wago:750-882_firmware
- wago:750-885_firmware
- wago:750-889_firmware
- wago:750-890_firmware
- wago:750-891_firmware
- wago:750-893_firmware
References
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=
- https://www.tenable.com/security/research/tra-2021-47
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=
- https://www.tenable.com/security/research/tra-2021-47