Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.
CVSS 2.0HIGH 7.5·Network·No auth·Interaction —·EPSS 0.0621·Published 2015-09-18·Fixed in 2.3.9.34CWE-119