In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37554, CVE-2023-37555 and CVE-2023-37556.
En múltiples versiones de múltiples productos de Codesys, después de una autenticación exitosa como usuario, las solicitudes de comunicación de red con contenido inconsistente pueden causar que el componente CmpAppBP lea internamente desde una dirección inválida, potencialmente llevando a una condición de denegación de servicio. Esta vulnerabilidad es diferente de CVE-2023-37552, CVE-2023-37554, CVE-2023-37555 y CVE-2023-37556.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-20
|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e60e8c7df00> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e60e8c7de40> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e60e8c7d740> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e6108404380> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e60e8c7fb40> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e60e8c7d180> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e60e8c7db00> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e60e8c7c400> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e60e8c7c580> | Application |
| codesys | control_rte_sl | * | <built-in method update of dict object at 0x7e60e8c7f300> | Application |
| codesys | control_rte_sl_\(for_beckhoff_cx\) | * | <built-in method update of dict object at 0x7e60e8c7dc80> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e60e8c7ed40> | Application |
| codesys | control_win_sl | * | <built-in method update of dict object at 0x7e60a88adc40> | Application |
| codesys | development_system | * | <built-in method update of dict object at 0x7e613c341100> | Application |
| codesys | hmi | * | <built-in method update of dict object at 0x7e60e8c7f800> | Application |
| codesys | safety_sil2 | * | <built-in method update of dict object at 0x7e6111c1dd80> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:* |