CVE-2018-5440: Buffer Overflow
A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request may cause a buffer overflow and could therefore execute arbitrary code on the web server or lead to a denial-of-service condition due to a crash in the web server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
3S-Smart CODESYS Web Serverto a version that resolves this vulnerability.Fixed in V1.1.9.19
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5440?
CVE-2018-5440 is classified as a high severity vulnerability due to its potential for causing a buffer overflow.
What systems are affected by CVE-2018-5440?
CVE-2018-5440 affects CODESYS Web Server version 2.3 and Microsoft Windows-based CODESYS runtime systems prior to version V1.1.9.19.
How do I fix CVE-2018-5440?
To fix CVE-2018-5440, update the CODESYS Web Server to version 2.3 or the CODESYS runtime system to version V1.1.9.19 or later.
What type of vulnerability is CVE-2018-5440?
CVE-2018-5440 is a stack-based buffer overflow vulnerability that can be exploited via crafted requests.
Can CVE-2018-5440 be exploited remotely?
Yes, CVE-2018-5440 can potentially be exploited remotely by sending specially crafted requests to the vulnerable servers.