CVE-2018-5440

A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request may cause a buffer overflow and could therefore execute arbitrary code on the web server or lead to a denial-of-service condition due to a crash in the web server.

• CWE-121
• CWE-787

• http://www.securityfocus.com/bid/102909Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-18-032-02Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/102909Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-18-032-02Third Party Advisory, US Government Resource

Published

Feb 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5434The TIBCO Designer component of TIBCO Software Inc.'s TIBCO …5.8
• CVE-2018-5435The TIBCO Spotfire Client and TIBCO Spotfire Web Player Clie…9.6
• CVE-2018-5436The Spotfire server component of TIBCO Software Inc.'s TIBCO…6.5
• CVE-2018-5437The TIBCO Spotfire Client and TIBCO Spotfire Web Player Clie…6.8
• CVE-2018-5438Philips ISCV application prior to version 2.3.0 has an insuf…
• CVE-2018-5439A Command Injection issue was discovered in Nortek Linear eM…
• CVE-2018-5441An Improper Validation of Integrity Check Value issue was di…
• CVE-2018-5442A Stack-based Buffer Overflow issue was discovered in Fuji E…9.8
• CVE-2018-5443A SQL Injection issue was discovered in Advantech WebAccess/…
• CVE-2018-5445A Path Traversal issue was discovered in Advantech WebAccess…
• CVE-2018-5446Medtronic 2090 CareLink Programmer uses a per-product user…4.9
• CVE-2018-5447An Improper Input Validation issue was discovered in Nari PC…