Signature Detail
Short Name |
SCADA:CODESYS-OPCODE03EF |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
SCADA |
Keywords |
CoDeSys Gateway Server Opcode 0x3ef Heap Buffer Overflow |
Release Date |
2015/12/15 |
Update Number |
2589 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SCADA: CoDeSys Gateway Server Opcode 0x3ef Heap Buffer Overflow
A heap buffer overflow vulnerability exists in 3S Smart Software CoDeSys. The vulnerability is due to insufficient input validation when parsing requests with opcode 0x3ef. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request message to the vulnerable service. Successful exploitation could result in code execution in the security context of the process. Unsuccessful attack attempts could cause the affected service to terminate abnormally, causing a denial of service (DoS) condition.
References
- CVE: CVE-2015-6460