An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o ejecución remota de código.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e60a8897d40> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e60bafaf7c0> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e60bafaf340> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e60bafac740> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e60a8894680> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e60bafac040> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e60a8896c80> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e6112306340> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e60a8896dc0> | Application |
| codesys | control_rte_\(for_beckhoff_cx\)_sl | * | <built-in method update of dict object at 0x7e60a8895600> | Application |
| codesys | control_rte_\(sl\) | * | <built-in method update of dict object at 0x7e60bafad480> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e60bae49c40> | Application |
| codesys | control_win_\(sl\) | * | <built-in method update of dict object at 0x7e60bafae040> | Application |
| codesys | development_system_v3 | * | <built-in method update of dict object at 0x7e6112306a00> | Application |
| codesys | hmi_\(sl\) | * | <built-in method update of dict object at 0x7e6111c1d680> | Application |
| codesys | safety_sil2_psp | * | <built-in method update of dict object at 0x7e60a8895300> | Application |
| codesys | safety_sil2_runtime_toolkit | * | <built-in method update of dict object at 0x7e6108405740> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(for_beckhoff_cx\)_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:* |