<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: codesys gateway-server</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2013-2781: Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers </title><link>https://patchthecve.com/cve/CVE-2013-2781.html</link><guid>https://patchthecve.com/cve/CVE-2013-2781.html</guid><pubDate>Tue, 16 Jun 2026 23:53:57 +0000</pubDate><description>HIGH 10.0: Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.</description></item><item><title>CVE-2012-4708: Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute ar</title><link>https://patchthecve.com/cve/CVE-2012-4708.html</link><guid>https://patchthecve.com/cve/CVE-2012-4708.html</guid><pubDate>Tue, 16 Jun 2026 23:45:36 +0000</pubDate><description>HIGH 10.0: Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.</description></item><item><title>CVE-2012-4707: 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that t</title><link>https://patchthecve.com/cve/CVE-2012-4707.html</link><guid>https://patchthecve.com/cve/CVE-2012-4707.html</guid><pubDate>Tue, 16 Jun 2026 23:45:36 +0000</pubDate><description>HIGH 10.0: 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access.</description></item><item><title>CVE-2012-4706: Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denia</title><link>https://patchthecve.com/cve/CVE-2012-4706.html</link><guid>https://patchthecve.com/cve/CVE-2012-4706.html</guid><pubDate>Tue, 16 Jun 2026 23:45:36 +0000</pubDate><description>HIGH 7.8: Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow.</description></item><item><title>CVE-2012-4705: Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to exec</title><link>https://patchthecve.com/cve/CVE-2012-4705.html</link><guid>https://patchthecve.com/cve/CVE-2012-4705.html</guid><pubDate>Tue, 16 Jun 2026 23:45:36 +0000</pubDate><description>HIGH 10.0: Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.</description></item><item><title>CVE-2012-4704: Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary co</title><link>https://patchthecve.com/cve/CVE-2012-4704.html</link><guid>https://patchthecve.com/cve/CVE-2012-4704.html</guid><pubDate>Tue, 16 Jun 2026 23:45:36 +0000</pubDate><description>HIGH 10.0: Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.</description></item></channel></rss>