CVE-2021-29241 : CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).

CVSS scores for CVE-2021-29241

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-29241

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-29241

https://customers.codesys.com/index.php

Customer Portal - Customer Portal
Permissions Required;Vendor Advisory

CVEs referencing this url
https://www.codesys.com/security/security-reports.html

Security Reports
Vendor Advisory

CVEs referencing this url
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14637&token=8dbd75ae7553ae3be25e22f741db783b31e14799&download=

Vendor Advisory

Products affected by CVE-2021-29241

Codesys » Control For Raspberry Pi Sl
Versions from including (>=) 3.0 and before (<) 4.0.1.0
cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*
Matching versions
Codesys » Control For Empc-a/imx6 Sl
Versions from including (>=) 3.0 and before (<) 4.0.1.0
cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*
Matching versions
Codesys » Control For Iot2000 Sl
Versions from including (>=) 3.0 and before (<) 4.0.1.0
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*
Matching versions
Codesys » Control For Linux Sl
Versions from including (>=) 3.0 and before (<) 4.0.1.0
cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*
Matching versions
Codesys » Control For Pfc100 Sl
Versions from including (>=) 3.0 and before (<) 3.5.16.0
cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*
Matching versions
Codesys » Control For Beaglebone Sl
Versions from including (>=) 3.0 and before (<) 4.0.1.0
cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*
Matching versions
Codesys » Control For Pfc200 Sl
Versions from including (>=) 3.0 and before (<) 3.5.16.0
cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*
Matching versions
Codesys » Gateway
Versions from including (>=) 3.0 and before (<) 3.5.16.70
cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*
Matching versions
Codesys » Development System
Versions from including (>=) 3.0 and before (<) 3.5.16.70
cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*
Matching versions
Codesys » Control Runtime System Toolkit
Versions from including (>=) 3.0 and before (<) 3.5.16.70
cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*
Matching versions
Codesys » Edge Gateway » For Windows
Versions from including (>=) 3.0 and before (<) 3.5.16.70
cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*
Matching versions
Codesys » Edge Gateway » For Linux
Versions from including (>=) 3.0 and before (<) 4.1.0.0
cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*
Matching versions

Vulnerability Details : CVE-2021-29241

Exploit prediction scoring system (EPSS) score for CVE-2021-29241

CVSS scores for CVE-2021-29241

CWE ids for CVE-2021-29241

References for CVE-2021-29241

Products affected by CVE-2021-29241