IM
IronMonkey Threat Research

CVE-2023-37550 MEDIUM

Published: 2023-08-03 | Last Modified: 2024-11-21 | Status: Modified

Description

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37548 and CVE-2023-37549.

Additional Descriptions (1)

En muchos productos Codesys en múltiples versiones, después de una autenticación exitosa como usuario, solicitudes de comunicación de red específicas diseñadas con contenido inconsistente pueden hacer que el componente CmpApp lea internamente desde una dirección no válida, lo que podría conducir a una condición de denegación de servicio. Esta vulnerabilidad es diferente a CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37548 y CVE-2023-37549.

CVSS Metrics

Base Score: 6.5 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Secondary

Exploitability Score: 2.8

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-20
[email protected] Primary
en NVD-CWE-noinfo

Affected Products

Vendor Product Version Update Type
codesys control_for_beaglebone_sl * <built-in method update of dict object at 0x7e60e8c7d9c0> Application
codesys control_for_empc-a\/imx6_sl * <built-in method update of dict object at 0x7e60e8c7f700> Application
codesys control_for_iot2000_sl * <built-in method update of dict object at 0x7e60e8c7ff00> Application
codesys control_for_linux_sl * <built-in method update of dict object at 0x7e60a8a543c0> Application
codesys control_for_pfc100_sl * <built-in method update of dict object at 0x7e60e8c7da40> Application
codesys control_for_pfc200_sl * <built-in method update of dict object at 0x7e60e8c7f180> Application
codesys control_for_plcnext_sl * <built-in method update of dict object at 0x7e60a8a56500> Application
codesys control_for_raspberry_pi_sl * <built-in method update of dict object at 0x7e60e8c7e940> Application
codesys control_for_wago_touch_panels_600_sl * <built-in method update of dict object at 0x7e60a8a55900> Application
codesys control_rte_sl * <built-in method update of dict object at 0x7e60e8c7de80> Application
codesys control_rte_sl_\(for_beckhoff_cx\) * <built-in method update of dict object at 0x7e60e8c7c340> Application
codesys control_runtime_system_toolkit * <built-in method update of dict object at 0x7e60e8c7df80> Application
codesys control_win_sl * <built-in method update of dict object at 0x7e611232ef40> Application
codesys development_system * <built-in method update of dict object at 0x7e60a8a56680> Application
codesys hmi * <built-in method update of dict object at 0x7e60a8a54240> Application
codesys safety_sil2 * <built-in method update of dict object at 0x7e60e8c7ef80> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:*

References

Notification
Message here