CVE-2021-34583

High

Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a…

CERTVDE·CWE-122·Published 2021-10-26

CVSS

7.5

EPSS

0.08

KEV

Exploits

cve.orgen

189 chars

Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.

NVDen

189 chars

Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.

Unas peticiones del servidor web diseñadas pueden causar un desbordamiento del búfer en la región heap de la memoria y, por tanto, podrían desencadenar una situación de denegación de servicio debido a un bloqueo en el servidor web de CODESYS V2 versiones anteriores a 1.1.9.22

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H