CVE:CVE-2011-5007
CNNVD:CNNVD-201112-447
3S CoDeSys 3.4 SP4 Patch 2版本中的CmpWebServer组件中存在基于栈的缓冲区溢出漏洞。远程攻击者可借助到TCP 8080端口的超长URI执行任意代码。
solution:Upgrade 3ssoftware codesys to a higher version than *:sp4,and avoid the version *:sp4