{"id":"CVE-2021-33485","aliases":["EUVD-2021-20188","GHSA-mrr3-f59g-2946"],"status":"published","title":"CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.","description":"CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0136,"percentile":0.72096,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-122","CWE-787"],"published":"2021-08-03T15:44:56Z","modified":"2026-06-17T03:54:39Z","products":[{"vendor":"codesys","product":"control"},{"vendor":"codesys","product":"control_rte"},{"vendor":"codesys","product":"control_runtime_system_toolkit"},{"vendor":"codesys","product":"control_win_sl"},{"vendor":"codesys","product":"embedded_target_visu_toolkit"},{"vendor":"codesys","product":"hmi"},{"vendor":"codesys","product":"remote_target_visu_toolkit"}],"references":[{"url":"https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=14805\u0026token=f0b86f99bb302ddd4aadec483aed5f5d3fddbf1a\u0026download=","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33485"},{"url":"https://github.com/advisories/GHSA-mrr3-f59g-2946"}],"sources":{"cve":[{"id":"CVE-2021-33485","description":"CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.","status":"published","published":"2021-08-03T15:44:56Z","modified":"2026-05-29T14:02:56.628Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:33:10.204494Z"}],"euvd":[{"id":"EUVD-2021-20188","description":"CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.","status":"published","published":"2021-08-03T15:44:56Z","modified":"2026-05-29T14:02:56Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:21:01.215325Z"}],"ghsa":[{"id":"GHSA-mrr3-f59g-2946","title":"CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.","description":"CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.","status":"published","published":"2022-05-24T19:09:51Z","modified":"2026-05-29T15:30:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T15:08:22.826978Z"}],"nvd":[{"id":"CVE-2021-33485","description":"CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.","status":"published","published":"2021-08-03T16:15:08.583Z","modified":"2026-06-17T03:54:39.427Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787","CWE-122"],"updated_at":"2026-11-02T14:06:56.562207Z"}]}}