CVE-2015-6460

Summary

Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://zerodayinitiative.com/advisories/ZDI-15-442/
• http://zerodayinitiative.com/advisories/ZDI-15-441/
• https://ics-cert.us-cert.gov/advisories/ICSA-15-258-02

References

• http://zerodayinitiative.com/advisories/ZDI-15-442/
• http://zerodayinitiative.com/advisories/ZDI-15-441/
• https://ics-cert.us-cert.gov/advisories/ICSA-15-258-02

• ←Previous
• Next→