PT-2015-7266 · 3S Smart+1 · 3S-Smart Codesys+1

Nicholas Miles · Publicado 2015-10-18 · Atualizado 2015-10-20 · CVE-2015-6482

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions 3S-Smart CODESYS versions prior to 2.3.9.48 Runtime Toolkit versions prior to 2.4.7.48

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted request.

Recommendations For 3S-Smart CODESYS versions prior to 2.3.9.48, update to version 2.3.9.48 or later. For Runtime Toolkit versions prior to 2.4.7.48, update to version 2.4.7.48 or later.

Correção

Identificadores relacionados

CVE-2015-6482

Produtos afetados

3S-Smart Codesys

Runtime Toolkit

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-6482 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-288-01 · Nota