Lucene search

K
nvd[email protected]NVD:CVE-2021-29241
HistoryMay 03, 2021 - 2:15 p.m.

CVE-2021-29241

2021-05-0314:15:07
CWE-476
web.nvd.nist.gov
6
codesys gateway 3
null pointer dereference
dos

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

56.7%

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).

Affected configurations

Nvd
Node
codesyscontrol_for_beaglebone_slRange3.04.0.1.0
OR
codesyscontrol_for_empc-a\/imx6_slRange3.04.0.1.0
OR
codesyscontrol_for_iot2000_slRange3.04.0.1.0
OR
codesyscontrol_for_linux_slRange3.04.0.1.0
OR
codesyscontrol_for_pfc100_slRange3.03.5.16.0
OR
codesyscontrol_for_pfc200_slRange3.03.5.16.0
OR
codesyscontrol_for_raspberry_pi_slRange3.04.0.1.0
OR
codesyscontrol_runtime_system_toolkitRange3.03.5.16.70
OR
codesysdevelopment_systemRange3.03.5.16.70
OR
codesysedge_gatewayRange3.03.5.16.70windows
OR
codesysedge_gatewayRange3.04.1.0.0linux
OR
codesysgatewayRange3.03.5.16.70
VendorProductVersionCPE
codesyscontrol_for_beaglebone_sl*cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_empc-a\/imx6_sl*cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_iot2000_sl*cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_linux_sl*cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_pfc100_sl*cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_pfc200_sl*cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_raspberry_pi_sl*cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*
codesyscontrol_runtime_system_toolkit*cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*
codesysdevelopment_system*cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*
codesysedge_gateway*cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*
Rows per page:
1-10 of 121

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

56.7%

Related for NVD:CVE-2021-29241