CVE-2021-30191
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
- Record
CVE-2021-30191- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
- Record
CVE-2021-30191- Updated
- 2026-11-02
EUVDEUVD-2021-17123 No score
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
- Record
EUVD-2021-17123- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9hr6-g366-m3pm
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
- Record
GHSA-9hr6-g366-m3pm- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
- codesys v2 web server
- wago 750-8202 firmware
- wago 750-8203 firmware
- wago 750-8204 firmware
- wago 750-8206 firmware
- wago 750-8207 firmware
- wago 750-8208 firmware
- wago 750-8210 firmware
- wago 750-8211 firmware
- wago 750-8212 firmware
- wago 750-8213 firmware
- wago 750-8214 firmware
Show 16 moreShow less
- wago 750-8216 firmware
- wago 750-8217 firmware
- wago 750-823 firmware
- wago 750-829 firmware
- wago 750-831 firmware
- wago 750-832 firmware
- wago 750-852 firmware
- wago 750-862 firmware
- wago 750-880 firmware
- wago 750-881 firmware
- wago 750-882 firmware
- wago 750-885 firmware
- wago 750-889 firmware
- wago 750-890 firmware
- wago 750-891 firmware
- wago 750-893 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-30191 is a high vulnerability (CVSS 7.5) in Codesys V2 Web Server, published May 25, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.99%, the 62nd percentile. No source names a fixed version.