CVE Vulnerabilities

CVE-2021-29241

NULL Pointer Dereference

Published: May 03, 2021 | Modified: Apr 01, 2022
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Control_for_beaglebone_sl Codesys 3.0 (including) 4.0.1.0 (excluding)
Control_for_empc-a/imx6_sl Codesys 3.0 (including) 4.0.1.0 (excluding)
Control_for_iot2000_sl Codesys 3.0 (including) 4.0.1.0 (excluding)
Control_for_linux_sl Codesys 3.0 (including) 4.0.1.0 (excluding)
Control_for_pfc100_sl Codesys 3.0 (including) 3.5.16.0 (excluding)
Control_for_pfc200_sl Codesys 3.0 (including) 3.5.16.0 (excluding)
Control_for_raspberry_pi_sl Codesys 3.0 (including) 4.0.1.0 (excluding)
Control_runtime_system_toolkit Codesys 3.0 (including) 3.5.16.70 (excluding)
Development_system Codesys 3.0 (including) 3.5.16.70 (excluding)
Edge_gateway Codesys 3.0 (including) 3.5.16.70 (excluding)
Edge_gateway Codesys 3.0 (including) 4.1.0.0 (excluding)
Gateway Codesys 3.0 (including) 3.5.16.70 (excluding)

Potential Mitigations

References