CVE-2021-29241

HIGH

CODESYS Gateway 3 < 3.5.16.70 - Denial of Service via NULL Pointer Dereference

Title source: llm

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).

Core 3

Core References

Permissions Required, Vendor Advisory x_refsource_misc

Vendor Advisory x_refsource_misc

Vendor Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0142

EPSS Percentile 69.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-476

Status published

Products (12)

codesys/control_for_beaglebone_sl 3.0 - 4.0.1.0

codesys/control_for_empc-a\/imx6_sl 3.0 - 4.0.1.0

codesys/control_for_iot2000_sl 3.0 - 4.0.1.0

codesys/control_for_linux_sl 3.0 - 4.0.1.0

codesys/control_for_pfc100_sl 3.0 - 3.5.16.0

codesys/control_for_pfc200_sl 3.0 - 3.5.16.0

codesys/control_for_raspberry_pi_sl 3.0 - 4.0.1.0

codesys/control_runtime_system_toolkit 3.0 - 3.5.16.70

codesys/development_system 3.0 - 3.5.16.70

codesys/edge_gateway 3.0 - 3.5.16.70

... and 2 more

Published May 03, 2021

Tracked Since Feb 18, 2026