Vulnerabilities > 3S Software > Codesys Gateway Server > 2.3.8.1

DATE CVE VULNERABILITY TITLE RISK
2013-02-24 CVE-2012-4708 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in 3S-Software Codesys Gateway-Server
Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.
network
low complexity
3s-software CWE-119
critical
10.0
2013-02-24 CVE-2012-4707 Code Injection vulnerability in 3S-Software Codesys Gateway-Server
3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access.
network
low complexity
3s-software CWE-94
critical
10.0
2013-02-24 CVE-2012-4706 Numeric Errors vulnerability in 3S-Software Codesys Gateway-Server
Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow.
network
low complexity
3s-software CWE-189
7.8
2013-02-24 CVE-2012-4705 Path Traversal vulnerability in 3S-Software Codesys Gateway-Server
Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.
network
low complexity
3s-software CWE-22
critical
10.0
2013-02-24 CVE-2012-4704 Improper Input Validation vulnerability in 3S-Software Codesys Gateway-Server
Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.
network
low complexity
3s-software CWE-20
critical
10.0