CVE-2015-6460

 

Published at: - 19-09-2015 12:59

Last modified: - 11-07-2022 01:15

Total changes: - 2

Description

Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• http://zerodayinitiative.com/advisories/ZDI-15-441/
• http://zerodayinitiative.com/advisories/ZDI-15-442/
• https://ics-cert.us-cert.gov/advisories/ICSA-15-258-02

 

Keywords

NVD

 

CVE-2015-6460

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures