Description
Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow.
Affected products
- 3ssoftware / codesys3.4 – 3.4
References
- MISChttp://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf
- MAILING_LISThttp://seclists.org/bugtraq/2011/Nov/178
- VENDOR_ADVISORYhttp://secunia.com/advisories/47018
- MISChttp://aluigi.altervista.org/adv/codesys_1-adv.txt
- MISChttp://www.osvdb.org/77386
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/71531