CVE-2021-34586: CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)
Published Oct 26, 2021
·Updated
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.
Affected Software
55 affected components
CODESYS CODESYS<1.1.9.22
All of the following
WAGO 750-823 Firmware<fw10
WAGO 750-823
All of the following
WAGO 750-829 Firmware<fw17
WAGO 750-829
All of the following
WAGO 750-831 Firmware<fw17
WAGO 750-831
All of the following
WAGO 750-832 Firmware<fw10
WAGO 750-832
All of the following
WAGO 750-852 Firmware<fw17
WAGO 750-852
All of the following
WAGO 750-862 Firmware<fw10
WAGO 750-862
All of the following
WAGO 750-880 Firmware<fw17
WAGO 750-880
All of the following
WAGO 750-881 Firmware<fw17
WAGO 750-881
All of the following
WAGO 750-882 Firmware<fw17
WAGO 750-882
All of the following
WAGO 750-885 Firmware<fw17
WAGO 750-885
All of the following
WAGO 750-889 Firmware<fw17
WAGO 750-889
All of the following
WAGO 750-890 Firmware<fw10
WAGO 750-890
All of the following
WAGO 750-891 Firmware<fw10
WAGO 750-891
All of the following
WAGO 750-893 Firmware<fw10
WAGO 750-893
All of the following
WAGO 750-8202 Firmware<fw20
WAGO 750-8202
All of the following
WAGO 750-8203 Firmware<fw20
WAGO 750-8203
All of the following
WAGO 750-8204 Firmware<fw20
WAGO 750-8204
All of the following
WAGO 750-8206 Firmware<fw20
WAGO 750-8206
All of the following
WAGO 750-8207 Firmware<fw20
WAGO 750-8207
All of the following
WAGO 750-8208 Firmware<fw20
WAGO 750-8208
All of the following
WAGO 750-8210 Firmware<fw20
WAGO 750-8210
All of the following
WAGO 750-8211 Firmware<fw20
WAGO 750-8211
All of the following
WAGO 750-8212 Firmware<fw20
WAGO 750-8212
All of the following
WAGO 750-8213 Firmware<fw20
WAGO 750-8213
All of the following
WAGO 750-8214 Firmware<fw20
WAGO 750-8214
All of the following
WAGO 750-8216 Firmware<fw20
WAGO 750-8216
All of the following
WAGO 750-8217 Firmware<fw20
WAGO 750-8217
Remediation
Information
CODESYS GmbH has released version V1.1.9.22 of the CODESYS V2 web server to solve the noted vulnerability issues. This version of the CODESYS V2 web server is also part of the CODESYS Development System setup version V2.3.9.68.
Event History
Oct 26, 2021
CVE Published
via MITRE·09:55 AM
Data Sourced
via MITRE·09:55 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-34586?
CVE-2021-34586 has a severity rating that indicates it could lead to denial-of-service conditions.
2
How do I fix CVE-2021-34586?
To mitigate CVE-2021-34586, update the CODESYS web server to version 1.1.9.22 or later.
3
What impact does CVE-2021-34586 have on CODESYS V2 users?
CVE-2021-34586 may result in a denial-of-service condition due to crafted web server requests.
4
Which versions of CODESYS are affected by CVE-2021-34586?
CVE-2021-34586 affects all versions of CODESYS prior to 1.1.9.22.
5
How does CVE-2021-34586 exploit the CODESYS web server?
CVE-2021-34586 exploits a null pointer dereference vulnerability in the web server.