← Vulnerability feed

Vulnerability record · CVE-2021-36764 · published 4 August 2021

CVE-2021-36764: Codesys gateway null pointer dereference vulnerability

Codesys · Gateway

In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition.

7.5 CVSS 3.1 High EPSS 0.99% · top 39.0% CWE-476 · NULL pointer dereference
7.5CVSS 3.1 base score, v2 5.0
0.99%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16804&token=d8c89c887979b22fdfc9fd5c3aa3804bbb1ddbff&download Broken Link
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16804&token=d8c89c887979b22fdfc9fd5c3aa3804bbb1ddbff&download Broken Link

Track CVE-2021-36764 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-31802Codesys gateway vulnerabilityIn CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway p…EPSS 1.3%9.8CVE-2019-9010Codesys control for beaglebone sl vulnerabilityAn issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All …EPSS 1.9%7.5CVE-2022-30791Codesys control for beaglebone uncontrolled resource consumption vulnerabilityIn CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections…EPSS 0.89%7.5CVE-2022-30792Codesys control for beaglebone uncontrolled resource consumption vulnerabilityIn CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communicati…EPSS 0.89%7.5CVE-2022-31804Codesys gateway vulnerabilityThe CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbi…EPSS 1.1%7.5CVE-2022-31805Codesys development system vulnerabilityIn the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers u…EPSS 1.0%7.5CVE-2022-22517Codesys control for beaglebone sl vulnerabilityAn unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting…EPSS 1.3%7.5CVE-2021-29241Codesys control for beaglebone sl null pointer dereference vulnerabilityCODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).EPSS 1.4%

Source: NIST National Vulnerability Database (record CVE-2021-36764), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.