Vulnerability Description
CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Codesys | Control For Beaglebone Sl | >= 3.0, < 4.0.1.0 |
| Codesys | Control For Empc-A\/Imx6 Sl | >= 3.0, < 4.0.1.0 |
| Codesys | Control For Iot2000 Sl | >= 3.0, < 4.0.1.0 |
| Codesys | Control For Linux Sl | >= 3.0, < 4.0.1.0 |
| Codesys | Control For Pfc100 Sl | >= 3.0, < 3.5.16.0 |
| Codesys | Control For Pfc200 Sl | >= 3.0, < 3.5.16.0 |
| Codesys | Control For Raspberry Pi Sl | >= 3.0, < 4.0.1.0 |
| Codesys | Control Runtime System Toolkit | >= 3.0, < 3.5.16.70 |
| Codesys | Development System | >= 3.0, < 3.5.16.70 |
| Codesys | Edge Gateway | >= 3.0, < 3.5.16.70 |
| Codesys | Gateway | >= 3.0, < 3.5.16.70 |
Related Weaknesses (CWE)
References
- https://customers.codesys.com/index.phpPermissions RequiredVendor Advisory
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14637&token=8dbd75ae7Vendor Advisory
- https://www.codesys.com/security/security-reports.htmlVendor Advisory
- https://customers.codesys.com/index.phpPermissions RequiredVendor Advisory
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14637&token=8dbd75ae7Vendor Advisory
- https://www.codesys.com/security/security-reports.htmlVendor Advisory
FAQ
What is CVE-2021-29241?
CVE-2021-29241 is a vulnerability with a CVSS score of 7.5 (HIGH). CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
How severe is CVE-2021-29241?
CVE-2021-29241 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-29241?
Check the references section above for vendor advisories and patch information. Affected products include: Codesys Control For Beaglebone Sl, Codesys Control For Empc-A\/Imx6 Sl, Codesys Control For Iot2000 Sl, Codesys Control For Linux Sl, Codesys Control For Pfc100 Sl.