ID CVE-2019-16265
Summary CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow.
References
Vulnerable Configurations
  • cpe:2.3:a:codesys:eni_server:-:*:*:*:*:*:*:*
    cpe:2.3:a:codesys:eni_server:-:*:*:*:*:*:*:*
  • cpe:2.3:a:codesys:codesys:2.3:*:*:*:*:*:*:*
    cpe:2.3:a:codesys:codesys:2.3:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 28-10-2019 - 14:17)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
confirm https://customers.codesys.com/fileadmin/data/customers/security/2019/Advisory2019-09_LCDS-319.pdf
misc https://www.codesys.com
Last major update 28-10-2019 - 14:17
Published 25-10-2019 - 17:15
Last modified 28-10-2019 - 14:17
Back to Top