CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages.
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
control for empc-a\/imx6 slNVD
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
control for iot2000 slNVD
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
control for linux arm slNVD
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
control for linux slNVD
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
control for pfc100 slNVD
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
control for pfc200 slNVD
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
control for plcnext slNVD
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
control for raspberry pi slNVD
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
control for wago touch panels 600 slNVD
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
control rteNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
control runtime system toolkitNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
control winNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
edge gatewayNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
Affected:>= 3.0, < 4.1.0.0Fixed in:4.1.0.0CVE-2021-29242derived from NVD
embedded target visu toolkitNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
gatewayNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
hmiNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
opc serverNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
plchandlerNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
remote target visu toolkitNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
safety silNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
simulation runtimeNVD
Affected:>= 3.0, < 3.5.17.0Fixed in:3.5.17.0CVE-2021-29242derived from NVD
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityLow
IntegrityLow
AvailabilityLow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploit Intelligence
1.07%probability of exploitation in 30 days
61stpercentile
Moderate risk: more likely to be exploited than 61% of all known CVEs.
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.
