An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o ejecución remota de código.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e6108405640> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e60a8894c80> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e60baface40> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e60bacd5600> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e6108405c00> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e6111c1dcc0> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e60a8897c40> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e6106845380> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e60bafae200> | Application |
| codesys | control_rte_\(for_beckhoff_cx\)_sl | * | <built-in method update of dict object at 0x7e6108407680> | Application |
| codesys | control_rte_\(sl\) | * | <built-in method update of dict object at 0x7e6108404f40> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e61084042c0> | Application |
| codesys | control_win_\(sl\) | * | <built-in method update of dict object at 0x7e60bafae480> | Application |
| codesys | development_system_v3 | * | <built-in method update of dict object at 0x7e60bafae9c0> | Application |
| codesys | hmi_\(sl\) | * | <built-in method update of dict object at 0x7e61084041c0> | Application |
| codesys | safety_sil2_psp | * | <built-in method update of dict object at 0x7e6111c1ee40> | Application |
| codesys | safety_sil2_runtime_toolkit | * | <built-in method update of dict object at 0x7e60a8895d40> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(for_beckhoff_cx\)_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:* |