CVE:CVE-2021-29242
CNNVD:CNNVD-202105-050
3s-smart Software Solutions CODESYS Control是德国3S-Smart Software Solutions（3s-smart Software Solutions）公司的一套工业控制程序编程软件。
CODESYS Control Runtime system 3.5.17.0之前版本存在安全漏洞，该漏洞源于有不正确的输入验证。攻击者可利用该漏洞可以发送精心设计的通信数据包来改变路由器的寻址方案，并可能重新路由、添加、删除或更改低级通信包。
solution:Upgrade codesys control_for_beaglebone_sl to a higher version than 4.1.0.0,and avoid the version [3.0,4.1.0.0); Upgrade codesys control_for_empc-a/imx6_sl to a higher version than 4.1.0.0,and avoid the version [3.0,4.1.0.0); Upgrade codesys control_for_iot2000_sl to a higher version than 4.1.0.0,and avoid the version [3.0,4.1.0.0); Upgrade codesys control_for_linux_arm_sl to a higher version than 4.1.0.0,and avoid the version [3.0,4.1.0.0); Upgrade codesys control_for_linux_sl to a higher version than 4.1.0.0,and avoid the version [3.0,4.1.0.0); Upgrade codesys control_for_pfc100_sl to a higher version than 4.1.0.0,and avoid the version [3.0,4.1.0.0); Upgrade codesys control_for_pfc200_sl to a higher version than 4.1.0.0,and avoid the version [3.0,4.1.0.0); Upgrade codesys control_for_plcnext_sl to a higher version than 4.1.0.0,and avoid the version [3.0,4.1.0.0); Upgrade codesys control_for_raspberry_pi_sl to a higher version than 4.1.0.0,and avoid the version [3.0,4.1.0.0); Upgrade codesys control_for_wago_touch_panels_600_sl to a higher version than 4.1.0.0,and avoid the version [3.0,4.1.0.0); Upgrade codesys control_rte to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0); Upgrade codesys control_runtime_system_toolkit to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0); Upgrade codesys control_win to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0); Upgrade codesys edge_gateway to a higher version than 3.5.17.0,4.1.0.0,and avoid the version [3.0,3.5.17.0),[3.0,4.1.0.0); Upgrade codesys embedded_target_visu_toolkit to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0); Upgrade codesys gateway to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0); Upgrade codesys hmi to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0); Upgrade codesys opc_server to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0); Upgrade codesys plchandler to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0); Upgrade codesys remote_target_visu_toolkit to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0); Upgrade codesys safety_sil to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0); Upgrade codesys simulation_runtime to a higher version than 3.5.17.0,and avoid the version [3.0,3.5.17.0)