CVE-2021-33485

CRITICO 9.8CVE-2021-33485 · Published 03/08/2021 · updated 17/06/2026

In breve

CVE-2021-33485 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda control (codesys), control rte (codesys), control runtime system toolkit (codesys).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.6% delle vulnerabilità.
Correzione: aggiornare a 4.2.0.0, 3.5.17.10 o successiva.

Package	Affected versions	Patched versions
control codesys	`≤ 4.2.0.0< 4.2.0.0`	`4.2.0.0`
control rte codesys	`< 3.5.17.10`	`3.5.17.10`
control runtime system toolkit codesys	`< 3.5.17.10`	`3.5.17.10`
control win sl codesys	`< 3.5.17.10`	`3.5.17.10`
embedded target visu toolkit codesys	`< 3.5.17.10`	`3.5.17.10`
hmi codesys	`< 3.5.17.10`	`3.5.17.10`
remote target visu toolkit codesys	`< 3.5.17.10`	`3.5.17.10`

CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.