PatchTheCVEcodesys gateway-server vulnerabilities and fixes
Recent CVEs affecting codesys gateway-server, with upgrade or downgrade steps. 6 tracked.
Also searched as: codesys gateway server, codesysgateway-server.
codesys gateway-server has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2013-05-23. Highest priority: CVE-2012-4705 (score 65/100).
- CVE-2013-2781 HIGH 10.0 DOWNGRADE Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers
- CVE-2012-4708 HIGH 10.0 UPGRADE Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute ar
- CVE-2012-4707 HIGH 10.0 UPGRADE 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that t
- CVE-2012-4706 HIGH 7.8 UPGRADE Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denia
- CVE-2012-4705 HIGH 10.0 UPGRADE Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to exec
- CVE-2012-4704 HIGH 10.0 UPGRADE Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary co
FAQ
How do I fix codesys gateway-server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is codesys gateway-server being exploited right now?
None of the tracked codesys gateway-server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which codesys gateway-server CVE should I patch first?
CVE-2012-4705 currently ranks highest (65/100): Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to exec.