An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation.
Un atacante remoto autenticado puede usar una vulnerabilidad de restricción inadecuada de operaciones dentro de los límites de un búfer de memoria en múltiples versiones de múltiples productos CODESYS para forzar una situación de denegación de servicio.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-119
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e60ba2a73c0> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e60ba2a7400> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e60ba2a7d40> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e60ba2a6ec0> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e60ba2a4e00> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e60ba2a4840> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e60ba2a5280> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e611224fc00> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e60ba2a41c0> | Application |
| codesys | control_rte_\(for_beckhoff_cx\)_sl | * | <built-in method update of dict object at 0x7e60ba2a4d80> | Application |
| codesys | control_rte_\(sl\) | * | <built-in method update of dict object at 0x7e60ba2a57c0> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e60ba2a77c0> | Application |
| codesys | control_win_\(sl\) | * | <built-in method update of dict object at 0x7e60ba2a6fc0> | Application |
| codesys | development_system_v3 | * | <built-in method update of dict object at 0x7e611224cf00> | Application |
| codesys | hmi_\(sl\) | * | <built-in method update of dict object at 0x7e611224e7c0> | Application |
| codesys | safety_sil2_psp | * | <built-in method update of dict object at 0x7e60ba2a7540> | Application |
| codesys | safety_sil2_runtime_toolkit | * | <built-in method update of dict object at 0x7e611224d080> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(for_beckhoff_cx\)_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi_\(sl\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:* |