PT-2014-3819 · At Software Solutions · Codesys Runtime Toolkit

Published 2014-01-31 · Updated 2014-02-21 · CVE-2014-0757

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Smart Software Solutions (3S) CoDeSys Runtime Toolkit versions prior to 2.4.7.44

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via unspecified vectors.

Recommendations For versions prior to 2.4.7.44, update to version 2.4.7.44 or later to resolve the issue.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

CWE-399

Related Identifiers

CVE-2014-0757

Affected Products

Codesys Runtime Toolkit

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-0757 · Security Note
• http://secunia.com/advisories/56713 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-14-030-01 · Note
• http://ics-cert.us-cert.gov/advisories/ICSA-14-030-01 · Note