CVE-2012-4707: Code Injection
Published Feb 24, 2013
·Updated
3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access.
Affected Software
16 affected components
3s-software Codesys Gateway-server<=2.3.9.19
3s-software Codesys Gateway-server=2.3.5.1
3s-software Codesys Gateway-server=2.3.5.2
3s-software Codesys Gateway-server=2.3.5.3
3s-software Codesys Gateway-server=2.3.6.0
3s-software Codesys Gateway-server=2.3.7.0
3s-software Codesys Gateway-server=2.3.8.0
3s-software Codesys Gateway-server=2.3.8.1
3s-software Codesys Gateway-server=2.3.8.2
3s-software Codesys Gateway-server=2.3.9
3s-software Codesys Gateway-server=2.3.9.1
3s-software Codesys Gateway-server=2.3.9.2
3s-software Codesys Gateway-server=2.3.9.3
3s-software Codesys Gateway-server=2.3.9.4
3s-software Codesys Gateway-server=2.3.9.5
3s-software Codesys Gateway-server=2.3.9.18
Event History
Feb 24, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4707?
CVE-2012-4707 has a critical severity rating due to the potential for remote code execution.
2
How do I fix CVE-2012-4707?
To fix CVE-2012-4707, upgrade to CODESYS Gateway-Server version 2.3.9.27 or later.
3
What versions of CODESYS Gateway are affected by CVE-2012-4707?
CVE-2012-4707 affects all CODESYS Gateway-Server versions prior to 2.3.9.27.
4
Can CVE-2012-4707 be exploited remotely?
Yes, CVE-2012-4707 can be exploited remotely by attackers to execute arbitrary code.
5
Is there a workaround for CVE-2012-4707?
Currently, the recommended mitigation for CVE-2012-4707 is to apply the latest software patch.