CVE & CISA-KEV Catalog

CVE-2021-34584

CRITICAL
9.1
CVSS v3
NVD

Description

Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.

CWE-126Buffer Over-read

How to fix

Remediation Available
750-8202 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8203 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8204 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8206 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8207 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8208 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8210 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8211 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8212 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8213 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8214 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8216 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-8217 firmwareNVD
Affected:< fw20Fixed in:fw20CVE-2021-34584derived from NVD
750-823 firmwareNVD
Affected:< fw10Fixed in:fw10CVE-2021-34584derived from NVD
750-829 firmwareNVD
Affected:< fw17Fixed in:fw17CVE-2021-34584derived from NVD
750-831 firmwareNVD
Affected:< fw17Fixed in:fw17CVE-2021-34584derived from NVD
750-832 firmwareNVD
Affected:< fw10Fixed in:fw10CVE-2021-34584derived from NVD
750-852 firmwareNVD
Affected:< fw17Fixed in:fw17CVE-2021-34584derived from NVD
750-862 firmwareNVD
Affected:< fw10Fixed in:fw10CVE-2021-34584derived from NVD
750-880 firmwareNVD
Affected:< fw17Fixed in:fw17CVE-2021-34584derived from NVD
750-881 firmwareNVD
Affected:< fw17Fixed in:fw17CVE-2021-34584derived from NVD
750-882 firmwareNVD
Affected:< fw17Fixed in:fw17CVE-2021-34584derived from NVD
750-885 firmwareNVD
Affected:< fw17Fixed in:fw17CVE-2021-34584derived from NVD
750-889 firmwareNVD
Affected:< fw17Fixed in:fw17CVE-2021-34584derived from NVD
750-890 firmwareNVD
Affected:< fw10Fixed in:fw10CVE-2021-34584derived from NVD
750-891 firmwareNVD
Affected:< fw10Fixed in:fw10CVE-2021-34584derived from NVD
750-893 firmwareNVD
Affected:< fw10Fixed in:fw10CVE-2021-34584derived from NVD
codesysNVD
Affected:< 1.1.9.22Fixed in:1.1.9.22CVE-2021-34584derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityHigh
IntegrityNone
AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploit Intelligence

1.07%probability of exploitation in 30 days
61stpercentile

Moderate risk: more likely to be exploited than 61% of all known CVEs.

References

Exploit1
Vendor Advisory1
Embed a live status badge for CVE-2021-34584
CVE-2021-34584 severity badge

Markdown

[![CVE-2021-34584](https://tridentstack.com/cve/badge/CVE-2021-34584.svg)](https://tridentstack.com/cve/CVE-2021-34584)

HTML

<a href="https://tridentstack.com/cve/CVE-2021-34584"><img src="https://tridentstack.com/cve/badge/CVE-2021-34584.svg" alt="CVE-2021-34584"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-08-15.