Wago: >> 750-8202 Firmware >> 03.06.19_(18) Security Vulnerabilities
Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
CVSS Score
9.1
EPSS Score
0.006
Published
2021-10-26
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.
CVSS Score
7.5
EPSS Score
0.005
Published
2021-10-26
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.
CVSS Score
7.5
EPSS Score
0.033
Published
2021-10-26
Page 2