Stack Overflow and Remote Code Execution Vulnerability in CODESYS V3 Web Server

Stack Overflow and Remote Code Execution Vulnerability in CODESYS V3 Web Server

CVE-2019-13548 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.

Learn more about our Web App Pen Testing.