Heap-based Buffer Overflow Vulnerability in 3S-Smart CODESYS Gateway Server
CVE-2015-6460

Currently unrated

Key Information:

Vendor

Codesys

Status
3s-smart Codesys Gateway Server
Vendor
CVE Published:
18 September 2015

What is CVE-2015-6460?

Multiple heap-based buffer overflows found in the 3S-Smart CODESYS Gateway Server prior to version 2.3.9.34 can be exploited by remote attackers to execute arbitrary code. This vulnerability arises from improper handling of specific opcodes, notably 0x3ef and 0x3f0, which may lead to unauthorized access and control over affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

3S-Smart CODESYS Gateway Server V2 < 2.3.9.34

References

http://zerodayinitiative.com/advisories/ZDI-15-442/
x_refsource_MISC
http://zerodayinitiative.com/advisories/ZDI-15-441/
x_refsource_MISC
https://ics-cert.us-cert.gov/advisories/ICSA-15-258-02
x_refsource_CONFIRM

EPSS Score

8% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.