CoDeSys 'Gateway Server'涓嶆�ｇ‘鍐呭瓨鎿嶄綔婕忔礊

admin

Bugtraq ID:58032
CVE ID:CVE-2012-4708
CNCVE ID锛欳NCVE-20124708

婕忔礊鍙戝竷鏃堕棿:2013-02-20
婕忔礊鏇存柊鏃堕棿:2013-02-20

婕忔礊缂樼敱
杈瑰�冩潯浠堕敊璇�
椋庨櫓绛夌骇
涓�

褰卞搷绯荤粺
3S CoDeSys 2.x
3S CoDeSys Gateway Server 2.x

涓嶅彈褰卞搷绯荤粺

鍗卞��
杩滅▼鏀诲嚮鑰呰兘澶熷簲鐢ㄦ紡娲炰娇搴旂敤绋嬪簭瑙ｄ綋銆�

鏀诲嚮鎵�闇�鏉′欢
鏀诲嚮鑰呭繀闇�璁块棶3S CODESYS Gateway-Server銆�

婕忔礊淇℃伅
CoDeSys鏄�涓�绉嶅姛鐢ㄥ己澶х殑PLC杞�浠剁紪绋嬪伐鍏凤紝瀹冩敮鎸両EC61131-3瑙勮寖IL 銆丼T銆� FBD 銆丩D銆� CFC銆� SFC 鍏�绉峆LC缂栫▼瑷�璇�銆�
3S CODESYS Gateway-Server瀛樺湪涓�涓�鍩轰簬鏍堢殑缂撳啿鍖烘孩鍑猴紝鍏佽�歌繙绋嬫敾鍑昏�呭簲鐢ㄦ紡娲炲悜TCP 1211绔�鍙ｅ彂閫佺壒鍒舵姤鏂囦娇搴旂敤绋嬪簭瑙ｄ綋銆�

娴嬭瘯鍔炴硶

鍘傚晢澶勭疆璁″垝
3S CoDeSys 2.3.9.38鏇剧粡淇�澶嶆�ゆ紡娲烇紝鍊¤��鐢ㄦ埛涓嬭浇杩愮敤锛�
http://www.3s-software.com/index.shtml?codesys_dev_dir

婕忔礊鎻愪緵鑰�
Aaron Portnoy, Exodus Intelligence.

婕忔礊闊宠��閾炬帴
http://ics-cert.us-cert.gov/pdf/ICSA-13-050-01.pdf

婕忔礊闊宠��鏍囬��
ICSA-13-050-01鈥�3S CODESYS GATEWAY-SERVER MULTIPLE VULNERABILITIES

OY4437

璋㈣阿鍒嗕韩