PT-2014-3819 · At Software Solutions · Codesys Runtime Toolkit

Publicado 2014-01-31 · Atualizado 2014-02-21 · CVE-2014-0757

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Smart Software Solutions (3S) CoDeSys Runtime Toolkit versions prior to 2.4.7.44

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via unspecified vectors.

Recommendations For versions prior to 2.4.7.44, update to version 2.4.7.44 or later to resolve the issue.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

CWE-399

Identificadores relacionados

CVE-2014-0757

Produtos afetados

Codesys Runtime Toolkit

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-0757 · Nota de Segurança
• http://secunia.com/advisories/56713 · Nota
• https://cisa.gov/news-events/ics-advisories/icsa-14-030-01 · Nota
• http://ics-cert.us-cert.gov/advisories/ICSA-14-030-01 · Nota