CVE-2021-33485: Buffer Overflow

Published Aug 3, 2021
·
Updated

CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.

Affected Software

16 affected components
CODESYS Control Beaglebone Sl<4.2.0.0
CODESYS Control Empc-a\/imx6 Sl<4.2.0.0
CODESYS Control Iot2000 Sl<4.2.0.0
CODESYS Control Linux Sl<=4.2.0.0
CODESYS Control Pfc100 Sl<4.2.0.0
CODESYS Control Pfc200 Sl<4.2.0.0
CODESYS Control Plcnext Sl<4.2.0.0
CODESYS Control Raspberry Pi Sl<4.2.0.0
CODESYS Control Wago Touch Panels 600 Sl<4.2.0.0
CODESYS Control Rte<3.5.17.10
CODESYS Control Rte Beckhoff Cx<3.5.17.10
CODESYS Control Runtime System Toolkit<3.5.17.10
CODESYS Control Win Sl<3.5.17.10
CODESYS Embedded Target Visu Toolkit<3.5.17.10
CODESYS HMI<3.5.17.10
CODESYS Remote Target Visu Toolkit<3.5.17.10

Event History

Aug 3, 2021
CVE Published
via MITRE·03:44 PM
Data Sourced
via MITRE·03:44 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is CVE-2021-33485?

CVE-2021-33485 is a vulnerability in the CODESYS Control Runtime system before version 3.5.17.10, leading to a heap-based buffer overflow.

2

How severe is CVE-2021-33485?

CVE-2021-33485 has a severity rating of 9.8 (critical).

3

Which software is affected by CVE-2021-33485?

CODESYS Control Runtime system versions before 3.5.17.10 are affected. This includes Codesys Control, Codesys Control Rte, Codesys Control Runtime System Toolkit, and other related software.

4

How can I fix CVE-2021-33485?

To fix CVE-2021-33485, users should upgrade their CODESYS Control Runtime system to version 3.5.17.10 or later.

5

What are the references for CVE-2021-33485?

You can find more information about CVE-2021-33485 at the following link: [https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14805&token=f0b86f99bb302ddd4aadec483aed5f5d3fddbf1a&download=](https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14805&token=f0b86f99bb302ddd4aadec483aed5f5d3fddbf1a&download=)

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203