CVE-2012-4704: Input Validation
Published Feb 24, 2013
·Updated
Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.
Affected Software
17 affected components
3s-software Codesys Gateway-server<=2.3.9.20
3s-software Codesys Gateway-server=2.3.5.1
3s-software Codesys Gateway-server=2.3.5.2
3s-software Codesys Gateway-server=2.3.5.3
3s-software Codesys Gateway-server=2.3.6.0
3s-software Codesys Gateway-server=2.3.7.0
3s-software Codesys Gateway-server=2.3.8.0
3s-software Codesys Gateway-server=2.3.8.1
3s-software Codesys Gateway-server=2.3.8.2
3s-software Codesys Gateway-server=2.3.9
3s-software Codesys Gateway-server=2.3.9.1
3s-software Codesys Gateway-server=2.3.9.2
3s-software Codesys Gateway-server=2.3.9.3
3s-software Codesys Gateway-server=2.3.9.4
3s-software Codesys Gateway-server=2.3.9.5
3s-software Codesys Gateway-server=2.3.9.18
3s-software Codesys Gateway-server=2.3.9.19
Event History
Feb 24, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4704?
CVE-2012-4704 has a high severity rating due to its potential for arbitrary code execution by remote attackers.
2
How do I fix CVE-2012-4704?
To fix CVE-2012-4704, upgrade the CODESYS Gateway-Server to version 2.3.9.27 or later.
3
What versions of CODESYS Gateway are affected by CVE-2012-4704?
CVE-2012-4704 affects CODESYS Gateway-Server versions prior to 2.3.9.27, including 2.3.5.1 through 2.3.9.19.
4
Can CVE-2012-4704 be exploited remotely?
Yes, CVE-2012-4704 can be exploited remotely through crafted packets sent to the vulnerable CODESYS Gateway-Server.
5
What impact does exploiting CVE-2012-4704 have?
Exploitation of CVE-2012-4704 can lead to complete system compromise, allowing attackers to execute arbitrary code.