CVE-2021-34585

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-252

Affected software

Vendor	Product	Versions
CODESYS	CODESYS V2	>= all web servers, < V1.1.9.22

References

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=Vendor Advisory
https://www.tenable.com/security/research/tra-2021-47Exploit, Third Party Advisory
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16876&token=a3f1d937f95e7034879f4f2ea8e5a99b168256a7&download=Vendor Advisory
https://www.tenable.com/security/research/tra-2021-47Exploit, Third Party Advisory

Timeline

Published: Oct 26, 2021
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2021

CVE-2021-345867.5In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server a CVE-2021-345875.3In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a CVE-2021-345888.6In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. Th CVE-2021-345897.5In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without auth CVE-2021-34596.8A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access a CVE-2021-345905.4In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code in CVE-2021-345917.8In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root acc CVE-2021-345928.8In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could ent CVE-2021-345937.5In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in se CVE-2021-345946.5TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a CVE-2021-345958.1A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinN CVE-2021-345966.5A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versio