CVE-2015-6460

ALTO 7.5CVE-2015-6460 · Published 18/09/2015 · updated 17/06/2026

In breve

CVE-2015-6460 è una vulnerabilità ALTO (CVSS 7.5) che riguarda codesys gateway server (3s-smart).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.2%, superiore al 93.6% delle vulnerabilità.
Correzione: aggiornare a 2.3.9.34 o successiva.

Package	Affected versions	Patched versions
codesys gateway server 3s-smart	`< 2.3.9.34`	`2.3.9.34`

Description

Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.

References

zerodayinitiative.com/advisories/ZDI-15-441 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-15-442 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-15-258-02 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free