CVE:CVE-2019-18858
CNNVD:CNNVD-201911-1189
3S-Smart Software Solutions CODESYS V3 web server是德国3S-Smart Software Solutions公司的一款使用在CODESYS产品中的Web服务器。
3S-Smart Software Solutions CODESYS V3 web server 3.5.15.20之前版本中的CmpWebServerHandlerV3.dll库存在缓冲区错误漏洞，该漏洞源于程序没有正确验证边界。远程攻击者可利用该漏洞在系统上执行任意代码，或导致应用程序崩溃。
solution:Upgrade codesys control_for_beaglebone to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys control_for_empc-a/imx6 to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys control_for_iot2000 to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys control_for_linux to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys control_for_pfc100 to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys control_for_pfc200 to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys control_for_plcnext to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys control_for_raspberry_pi to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys control_rte to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys control_runtime_system_toolkit to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys control_win to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys embedded_target_visu_toolkit to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys hmi to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20); Upgrade codesys remote_target_visu_toolkit to a higher version than 3.5.15.20,and avoid the version (,3.5.15.20)