Riskcovery

CVE-2017-6025

State
Published
Severity
Not scored
Published
May 19, 2017
Updated
Aug 5, 2024
Reserved
Feb 16, 2017

Read the record on cve.org

Description

A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A malicious user could overflow the stack buffer by providing overly long strings to functions that handle the XML. Because the function does not verify string size before copying to memory, the attacker may then be able to crash the application or run arbitrary code.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
3S-Smart Software Solutions GmbH CODESYS Web Servern/a
  • 3S-Smart Software Solutions GmbH CODESYS Web ServerAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.