CVE-2018-5440 Memory corruption in 3S-Smart Software Solutions GmbH CODESYS Web Server

What is CVE-2018-5440?

CVE-2018-5440 is a critical memory corruption vulnerability in 3S-Smart Software Solutions GmbH CODESYS Web Server, published on 15 Feb 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request may cause a buffer overflow and could therefore execute arbitrary code on the web server or lead to a denial-of-service condition due to a crash in the web server.

Weakness: CWE-787, CWE-121

Which versions are affected by CVE-2018-5440?

It affects 2 products.

Products include 3s-Software Codesys Runtime System, 3s-Software Codesys Web Server.

How do I fix CVE-2018-5440?

No fix has been published for CVE-2018-5440 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-5440 being exploited?

There is no known exploitation of CVE-2018-5440 in the wild and no public exploit code.

Other vulnerabilities in 3S-Smart Software Solutions GmbH CODESYS Web Server

• CVE-2012-6069 3S CoDeSys Relative Path Traversal Critical 10.0
• CVE-2012-6068 3S CoDeSys Improper Access Control Critical 9.8
• CVE-2014-0760 Festo CECX-X-(C1/M1) Controller Improper Authentication Critical 9.3
• CVE-2014-0769 Festo CECX-X-(C1/M1) Controller Improper Authentication Critical 9.3
• CVE-2015-6482 Null dereference in n/a Medium 5.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8jg4-q5rf-9hjg.