An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o ejecución remota de código.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e60a888ca40> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e61081f4980> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e61081f4200> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e61081f4240> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e60a888eb00> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e60a888c180> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e61081f7d40> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e61081f6a80> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e61081f4f40> | Application |
| codesys | control_rte_\(for_beckhoff_cx\)_sl | * | <built-in method update of dict object at 0x7e60a888da80> | Application |
| codesys | control_rte_\(sl\) | * | <built-in method update of dict object at 0x7e61081f7100> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e60ba25e0c0> | Application |
| codesys | control_win_\(sl\) | * | <built-in method update of dict object at 0x7e61081f6580> | Application |
| codesys | development_system_v3 | * | <built-in method update of dict object at 0x7e61081f48c0> | Application |
| codesys | hmi_\(sl\) | * | <built-in method update of dict object at 0x7e61081f7c80> | Application |
| codesys | safety_sil2_psp | * | <built-in method update of dict object at 0x7e61081f6340> | Application |
| codesys | safety_sil2_runtime_toolkit | * | <built-in method update of dict object at 0x7e61081f58c0> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(for_beckhoff_cx\)_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:* |