CVE-2012-4708: Buffer Overflow
Published Feb 24, 2013
·Updated
Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.
Affected Software
17 affected components
3s-software Codesys Gateway-server<=2.3.9.20
3s-software Codesys Gateway-server=2.3.5.1
3s-software Codesys Gateway-server=2.3.5.2
3s-software Codesys Gateway-server=2.3.5.3
3s-software Codesys Gateway-server=2.3.6.0
3s-software Codesys Gateway-server=2.3.7.0
3s-software Codesys Gateway-server=2.3.8.0
3s-software Codesys Gateway-server=2.3.8.1
3s-software Codesys Gateway-server=2.3.8.2
3s-software Codesys Gateway-server=2.3.9
3s-software Codesys Gateway-server=2.3.9.1
3s-software Codesys Gateway-server=2.3.9.2
3s-software Codesys Gateway-server=2.3.9.3
3s-software Codesys Gateway-server=2.3.9.4
3s-software Codesys Gateway-server=2.3.9.5
3s-software Codesys Gateway-server=2.3.9.18
3s-software Codesys Gateway-server=2.3.9.19
Event History
Feb 24, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4708?
CVE-2012-4708 has a critical severity rating due to the potential for remote code execution.
2
How do I fix CVE-2012-4708?
To fix CVE-2012-4708, upgrade the CODESYS Gateway Server to version 2.3.9.27 or later.
3
Which versions of CODESYS Gateway are affected by CVE-2012-4708?
CVE-2012-4708 affects CODESYS Gateway Server versions prior to 2.3.9.27, including multiple earlier versions.
4
What are the potential impacts of CVE-2012-4708?
The potential impacts of CVE-2012-4708 include remote code execution, leading to unauthorized access and control over the affected system.
5
When was CVE-2012-4708 published?
CVE-2012-4708 was published on November 5, 2012.