An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o ejecución remota de código.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e60a8896a80> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e60bafad7c0> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e60bafafb00> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e6111c1dc80> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e60a8894740> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e60a8896980> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e60bafae100> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e60bacd6580> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e60bafad9c0> | Application |
| codesys | control_rte_\(for_beckhoff_cx\)_sl | * | <built-in method update of dict object at 0x7e60a8894300> | Application |
| codesys | control_rte_\(sl\) | * | <built-in method update of dict object at 0x7e60bacd5700> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e60bafaf880> | Application |
| codesys | control_win_\(sl\) | * | <built-in method update of dict object at 0x7e60bacd5f80> | Application |
| codesys | development_system_v3 | * | <built-in method update of dict object at 0x7e60bacd4440> | Application |
| codesys | hmi_\(sl\) | * | <built-in method update of dict object at 0x7e60bacd7140> | Application |
| codesys | safety_sil2_psp | * | <built-in method update of dict object at 0x7e60bacd7b80> | Application |
| codesys | safety_sil2_runtime_toolkit | * | <built-in method update of dict object at 0x7e60a8895bc0> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(for_beckhoff_cx\)_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:* |