Unrated severityNVD Advisory· Published Oct 26, 2021· Updated Sep 16, 2024
CODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)
CVE-2021-34585
Description
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.
Affected products
1- Range: all web servers
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- customers.codesys.com/index.phpmitrex_refsource_CONFIRM
- www.tenable.com/security/research/tra-2021-47mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.