CVE-2021-29242 - Vulnerability Details

Vendors	Products
Codesys	Control For Beaglebone Sl Control For Empc-a\/imx6 Sl Control For Iot2000 Sl Control For Linux Arm Sl Control For Linux Sl Control For Pfc100 Sl Control For Pfc200 Sl Control For Plcnext Sl Control For Raspberry Pi Sl Control For Wago Touch Panels 600 Sl Control Rte Control Runtime System Toolkit Control Win Edge Gateway Embedded Target Visu Toolkit Gateway Hmi Opc Server Plchandler Remote Target Visu Toolkit Safety Sil Simulation Runtime

Link	Providers
https://customers.codesys.com/index.php
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download=
https://www.codesys.com/security/security-reports.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-05-03T13:56:06", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://customers.codesys.com/index.php"}, {"tags": ["x_refsource_MISC"], "url": "https://www.codesys.com/security/security-reports.html"}, {"tags": ["x_refsource_MISC"], "url": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download="}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2021-29242", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://customers.codesys.com/index.php", "refsource": "MISC", "url": "https://customers.codesys.com/index.php"}, {"name": "https://www.codesys.com/security/security-reports.html", "refsource": "MISC", "url": "https://www.codesys.com/security/security-reports.html"}, {"name": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download=", "refsource": "MISC", "url": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download="}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T22:02:51.582Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://customers.codesys.com/index.php"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.codesys.com/security/security-reports.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download="}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2021-29242", "datePublished": "2021-05-03T13:56:06", "dateReserved": "2021-03-25T00:00:00", "dateUpdated": "2024-08-03T22:02:51.582Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-05-03T13:56:06 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://customers.codesys.com/index.php (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://www.codesys.com/security/security-reports.html (string)

}

2 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download= (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

ID : CVE-2021-29242 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://customers.codesys.com/index.php (string)

refsource : MISC (string)

url : https://customers.codesys.com/index.php (string)

}

1 : { »

name : https://www.codesys.com/security/security-reports.html (string)

refsource : MISC (string)

url : https://www.codesys.com/security/security-reports.html (string)

}

2 : { »

name : https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download= (string)

refsource : MISC (string)

url : https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download= (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T22:02:51.582Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://customers.codesys.com/index.php (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://www.codesys.com/security/security-reports.html (string)

}

2 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download= (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2021-29242 (string)

datePublished : 2021-05-03T13:56:06 (string)

dateReserved : 2021-03-25T00:00:00 (string)

dateUpdated : 2024-08-03T22:02:51.582Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*", "matchCriteriaId": "5EA5176A-EC2A-4D06-A180-CE7204DBAF92", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*", "matchCriteriaId": "089B01CE-0023-44E9-8149-95A9C8BFC544", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*", "matchCriteriaId": "150D1F73-22B1-4B41-97A0-B02EF5CE92A9", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*", "matchCriteriaId": "11A71DCF-8007-4693-BD0F-22FCD0FC0C62", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*", "matchCriteriaId": "6ADB2C58-D545-451E-BE60-7B989E9EBCEF", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*", "matchCriteriaId": "6C535337-0082-4C76-B9E9-E0F9EA4D1E36", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*", "matchCriteriaId": "ADCF1EDB-6FED-4421-BF16-A14EE6EB0505", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*", "matchCriteriaId": "9DB284A7-76D5-4BD1-972B-751AC0B378D8", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA3C058E-AE70-4E64-B3A0-60DED7A26B18", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*", "matchCriteriaId": "67D475FB-BF84-4EEE-B096-8B81C2ED36A5", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_rte:*:*:*:*:*:*:*:*", "matchCriteriaId": "64A83FD0-A545-459B-860F-70DE8E4A69DC", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_rte:*:*:*:*:*:beckhoff_cx:*:*", "matchCriteriaId": "9BFCCFA4-A803-4B5E-BAD5-C26A6FE33A4C", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "0224CA62-8670-4135-9A50-5E523D89CB25", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:control_win:*:*:*:*:*:*:*:*", "matchCriteriaId": "25458B55-414D-4CB4-BD51-4E4D101BB24A", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*", "matchCriteriaId": "E331194D-C80D-4C81-A332-9F67F6425FD0", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*", "matchCriteriaId": "FFBA19D6-9436-4E14-B9D3-28B82CB0321D", "versionEndExcluding": "4.1.0.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "A59EBA23-C9F0-4A7A-9483-2EB9377023CE", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*", "matchCriteriaId": "E3954149-77D5-4FEE-B236-578D0ED18592", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:*", "matchCriteriaId": "A39C361B-514B-423C-B917-2E13935DF1A9", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:opc_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "E59EF90A-4580-41AD-8DAB-1259C766E230", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:plchandler:*:*:*:*:*:*:*:*", "matchCriteriaId": "242B0BB4-1E48-4CD1-AFF3-F96561D2A885", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "74AB840C-88D7-47CA-8716-0C0F6ABEE8E2", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:safety_sil:*:*:*:*:*:*:*:*", "matchCriteriaId": "FEF5325B-B72B-46BB-9DCB-F8054621DA6D", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:codesys:simulation_runtime:*:*:*:*:*:*:*:*", "matchCriteriaId": "61972DA3-9423-4C13-98E3-F287BD414A59", "versionEndExcluding": "3.5.17.0", "versionStartIncluding": "3.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages."}, {"lang": "es", "value": "El sistema CODESYS Control Runtime versiones anteriores a 3.5.17.0, presenta una comprobaci\u00f3n inapropiada de entrada.&#xa0;Los atacantes pueden enviar paquetes de comunicaci\u00f3n dise\u00f1ados para cambiar el esquema de direccionamiento del enrutador y pueden redireccionar, agregar, eliminar o cambiar paquetes de comunicaci\u00f3n de bajo nivel."}], "id": "CVE-2021-29242", "lastModified": "2024-11-21T06:00:52.023", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-05-03T14:15:07.667", "references": [{"source": "cve@mitre.org", "tags": ["Permissions Required", "Vendor Advisory"], "url": "https://customers.codesys.com/index.php"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download="}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.codesys.com/security/security-reports.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required", "Vendor Advisory"], "url": "https://customers.codesys.com/index.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download="}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.codesys.com/security/security-reports.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 5EA5176A-EC2A-4D06-A180-CE7204DBAF92 (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 089B01CE-0023-44E9-8149-95A9C8BFC544 (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 150D1F73-22B1-4B41-97A0-B02EF5CE92A9 (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 11A71DCF-8007-4693-BD0F-22FCD0FC0C62 (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6ADB2C58-D545-451E-BE60-7B989E9EBCEF (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6C535337-0082-4C76-B9E9-E0F9EA4D1E36 (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* (string)

matchCriteriaId : ADCF1EDB-6FED-4421-BF16-A14EE6EB0505 (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 9DB284A7-76D5-4BD1-972B-751AC0B378D8 (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* (string)

matchCriteriaId : BA3C058E-AE70-4E64-B3A0-60DED7A26B18 (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 67D475FB-BF84-4EEE-B096-8B81C2ED36A5 (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:codesys:control_rte:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 64A83FD0-A545-459B-860F-70DE8E4A69DC (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:codesys:control_rte:*:*:*:*:*:beckhoff_cx:*:* (string)

matchCriteriaId : 9BFCCFA4-A803-4B5E-BAD5-C26A6FE33A4C (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0224CA62-8670-4135-9A50-5E523D89CB25 (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:codesys:control_win:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 25458B55-414D-4CB4-BD51-4E4D101BB24A (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:* (string)

matchCriteriaId : E331194D-C80D-4C81-A332-9F67F6425FD0 (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:* (string)

matchCriteriaId : FFBA19D6-9436-4E14-B9D3-28B82CB0321D (string)

versionEndExcluding : 4.1.0.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A59EBA23-C9F0-4A7A-9483-2EB9377023CE (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E3954149-77D5-4FEE-B236-578D0ED18592 (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A39C361B-514B-423C-B917-2E13935DF1A9 (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:codesys:opc_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E59EF90A-4580-41AD-8DAB-1259C766E230 (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:codesys:plchandler:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 242B0BB4-1E48-4CD1-AFF3-F96561D2A885 (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 74AB840C-88D7-47CA-8716-0C0F6ABEE8E2 (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:codesys:safety_sil:*:*:*:*:*:*:*:* (string)

matchCriteriaId : FEF5325B-B72B-46BB-9DCB-F8054621DA6D (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:codesys:simulation_runtime:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 61972DA3-9423-4C13-98E3-F287BD414A59 (string)

versionEndExcluding : 3.5.17.0 (string)

versionStartIncluding : 3.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages. (string)

}

1 : { »

lang : es (string)

value : El sistema CODESYS Control Runtime versiones anteriores a 3.5.17.0, presenta una comprobación inapropiada de entrada. Los atacantes pueden enviar paquetes de comunicación diseñados para cambiar el esquema de direccionamiento del enrutador y pueden redireccionar, agregar, eliminar o cambiar paquetes de comunicación de bajo nivel. (string)

}

]

id : CVE-2021-29242 (string)

lastModified : 2024-11-21T06:00:52.023 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 7.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 7.3 (number)

baseSeverity : HIGH (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-05-03T14:15:07.667 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Permissions Required (string)

1 : Vendor Advisory (string)

]

url : https://customers.codesys.com/index.php (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download= (string)

}

2 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.codesys.com/security/security-reports.html (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Permissions Required (string)

1 : Vendor Advisory (string)

]

url : https://customers.codesys.com/index.php (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download= (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.codesys.com/security/security-reports.html (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-20 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object