Filtered by vendor 3ssoftware Subscriptions
Filtered by product Codesys Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2011-5058 1 3ssoftware 1 Codesys 2024-11-21 N/A
The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ (backslash) characters in an HTTP GET request.
CVE-2011-5009 1 3ssoftware 1 Codesys 2024-11-21 N/A
The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method.
CVE-2011-5008 1 3ssoftware 1 Codesys 2024-11-21 N/A
Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow.
CVE-2011-5007 1 3ssoftware 1 Codesys 2024-11-21 N/A
Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.