In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.
En varios productos CODESYS en múltiples versiones, un atacante remoto no autorizado puede usar una vulnerabilidad de validación de entrada incorrecta para leer direcciones no válidas, lo que provoca una denegación de servicio.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-20
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e60e8c7db40> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e60a8a576c0> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e60bae49040> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e60e8343580> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e60e8c7cd40> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e60e8c7f500> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e60bae481c0> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e613c4c17c0> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e60bae4aa80> | Application |
| codesys | control_rte_\(for_beckhoff_cx\)_sl | * | <built-in method update of dict object at 0x7e60e8c7c280> | Application |
| codesys | control_rte_\(sl\) | * | <built-in method update of dict object at 0x7e60e8343540> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e60e8c7ff00> | Application |
| codesys | control_win_\(sl\) | * | <built-in method update of dict object at 0x7e60a8a54300> | Application |
| codesys | development_system_v3 | * | <built-in method update of dict object at 0x7e60eb2d9480> | Application |
| codesys | hmi_\(sl\) | * | <built-in method update of dict object at 0x7e6134109a80> | Application |
| codesys | safety_sil2_psp | * | <built-in method update of dict object at 0x7e60a8a57cc0> | Application |
| codesys | safety_sil2_runtime_toolkit | * | <built-in method update of dict object at 0x7e6110a57480> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(for_beckhoff_cx\)_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:* |