ID
VAR-201805-1205
TITLE
Hollysys LE5109L PLC has buffer overflow vulnerability
Trust: 0.6
DESCRIPTION
Hollysys Group is a professional automation company integrating R & D, production, sales and technical services. Hollysys PLC integrated Ethernet, PROFIBUS-DP, RS232, RS485 interfaces have been widely used in power, chemical, metallurgy, energy and other fields. Hollysys LE5109L PLC has a buffer overflow vulnerability. An attacker can use this vulnerability to cause a buffer overflow in the Hollysys PLC by constructing a specific modbus network data packet. The CPU enters a failure mode and cannot be pinged. It can automatically restart after a period of time
Trust: 0.72
IOT TAXONOMY
| category: | ['ICS', 'Network device'] | sub_category: | - | Trust: 0.6 |
| category: | ['ICS'] | sub_category: | - | Trust: 0.2 |
AFFECTED PRODUCTS
| vendor: | hollysys | model: | group hollysys le series controller le5109l | scope: | - | version: | - | Trust: 0.6 |
| vendor: | hollysys | model: | group hollysea le series controller le5109l | scope: | eq | version: | * | Trust: 0.2 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
TYPE
Buffer overflow
Trust: 0.2
PATCH
| title: | Hollysys LE5109L PLC has buffer overflow vulnerability | url: | https://www.cnvd.org.cn/patchinfo/show/125649 | Trust: 0.6 |
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2018-08785 | Trust: 0.8 |
| db: | IVD | id: | E2EE2701-39AB-11E9-8B1C-000C29342CB1 | Trust: 0.2 |
SOURCES
| db: | IVD | id: | e2ee2701-39ab-11e9-8b1c-000c29342cb1 |
| db: | CNVD | id: | CNVD-2018-08785 |
LAST UPDATE DATE
2022-05-17T02:09:44.688000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2018-08785 | date: | 2018-05-07T00:00:00 |
SOURCES RELEASE DATE
| db: | IVD | id: | e2ee2701-39ab-11e9-8b1c-000c29342cb1 | date: | 2018-05-03T00:00:00 |
| db: | CNVD | id: | CNVD-2018-08785 | date: | 2018-05-28T00:00:00 |