CVE-2015-6484

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2015-6484
3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted (1) GET or (2) POST request.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-293-03 Third Party Advisory US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-293-03 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:a:3s-smart_software_solutions:codesys_gateway_server:*:*:*:*:*:*:*:*
History

21 Nov 2024, 02:35

Type Values Removed Values Added
References () https://ics-cert.us-cert.gov/advisories/ICSA-15-293-03 - Third Party Advisory, US Government Resource () https://ics-cert.us-cert.gov/advisories/ICSA-15-293-03 - Third Party Advisory, US Government Resource
Information

Published : 2015-10-25 02:59

Updated : 2024-11-21 02:35

NVD link : CVE-2015-6484

Mitre link : CVE-2015-6484

CVE.ORG link : CVE-2015-6484

JSON object : View

Products Affected

3s-smart_software_solutions

  • codesys_gateway_server
CWE
NVD-CWE-Other