After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition.
Después de una autenticación exitosa como usuario en múltiples productos Codesys en múltiples versiones, solicitudes de comunicación remota diseñadas específicamente pueden hacer que el componente CmpAppBP sobrescriba un desbordamiento de búfer, lo que puede conducir a una condición de denegación de servicio.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e60e846c980> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e60e846ff00> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e61109d5380> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e60e846d080> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e60e846dfc0> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e60e846df00> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e61118a6580> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e61118a5380> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e60e846c040> | Application |
| codesys | control_rte_sl | * | <built-in method update of dict object at 0x7e60e846fe80> | Application |
| codesys | control_rte_sl_\(for_beckhoff_cx\) | * | <built-in method update of dict object at 0x7e61109d4f40> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e60e846fbc0> | Application |
| codesys | control_win_sl | * | <built-in method update of dict object at 0x7e60e846f1c0> | Application |
| codesys | development_system | * | <built-in method update of dict object at 0x7e61109d5cc0> | Application |
| codesys | hmi | * | <built-in method update of dict object at 0x7e61109d45c0> | Application |
| codesys | safety_sil2 | * | <built-in method update of dict object at 0x7e61109d4200> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:* |