After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37559
Después de una autenticación exitosa como usuario en múltiples productos Codesys en múltiples versiones, solicitudes de comunicación de red específicas diseñadas con contenido inconsistente pueden hacer que el componente CmpAppForce lea internamente desde una dirección no válida, lo que podría conducir a una condición de denegación de servicio. Esta vulnerabilidad es diferente a CVE-2023-37559
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-20
|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e60bb885d80> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e60bb886140> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e60bb884980> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e60eb227180> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e60bb885980> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e60bb8875c0> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e60bb884e40> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e60bb884b40> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e60bb887980> | Application |
| codesys | control_rte_sl | * | <built-in method update of dict object at 0x7e60bb885c40> | Application |
| codesys | control_rte_sl_\(for_beckhoff_cx\) | * | <built-in method update of dict object at 0x7e60bb885680> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e60bb885740> | Application |
| codesys | control_win_sl | * | <built-in method update of dict object at 0x7e60eb224840> | Application |
| codesys | development_system | * | <built-in method update of dict object at 0x7e60bb887b40> | Application |
| codesys | hmi | * | <built-in method update of dict object at 0x7e6110a56fc0> | Application |
| codesys | safety_sil2 | * | <built-in method update of dict object at 0x7e6110a56a40> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:* |