In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37556.
En múltiples versiones de múltiples productos de Codesys, después de una autenticación exitosa como usuario, las solicitudes de comunicación de red específicas con contenido inconsistente pueden causar que el componente CmpAppBP lea internamente desde una dirección inválida, potencialmente llevando a una condición de denegación de servicio. Esta vulnerabilidad es diferente de CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 y CVE-2023-37556.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-20
|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e61109d5a40> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e6112373f40> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e60a87b6440> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e61109edec0> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e61109d7240> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e61109d7300> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e60bae0ed00> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e6112303bc0> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e60bae0ed40> | Application |
| codesys | control_rte_sl | * | <built-in method update of dict object at 0x7e61109d5c80> | Application |
| codesys | control_rte_sl_\(for_beckhoff_cx\) | * | <built-in method update of dict object at 0x7e613c3ab600> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e60bacd7600> | Application |
| codesys | control_win_sl | * | <built-in method update of dict object at 0x7e60bac1bfc0> | Application |
| codesys | development_system | * | <built-in method update of dict object at 0x7e6106847480> | Application |
| codesys | hmi | * | <built-in method update of dict object at 0x7e60bae499c0> | Application |
| codesys | safety_sil2 | * | <built-in method update of dict object at 0x7e6110a56c80> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:* |