After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37558
Después de una autenticación exitosa como usuario en múltiples productos Codesys en múltiples versiones, solicitudes de comunicación de red específicas diseñadas con contenido inconsistente pueden hacer que el componente CmpAppForce lea internamente desde una dirección no válida, lo que podría conducir a una condición de denegación de servicio. Esta vulnerabilidad es diferente a CVE-2023-37558
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-20
|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | control_for_beaglebone_sl | * | <built-in method update of dict object at 0x7e61342e6d00> | Application |
| codesys | control_for_empc-a\/imx6_sl | * | <built-in method update of dict object at 0x7e61342e4740> | Application |
| codesys | control_for_iot2000_sl | * | <built-in method update of dict object at 0x7e60bae0fb80> | Application |
| codesys | control_for_linux_sl | * | <built-in method update of dict object at 0x7e61342c9840> | Application |
| codesys | control_for_pfc100_sl | * | <built-in method update of dict object at 0x7e61342e5e40> | Application |
| codesys | control_for_pfc200_sl | * | <built-in method update of dict object at 0x7e60eb219840> | Application |
| codesys | control_for_plcnext_sl | * | <built-in method update of dict object at 0x7e61342e7f80> | Application |
| codesys | control_for_raspberry_pi_sl | * | <built-in method update of dict object at 0x7e60bae0d1c0> | Application |
| codesys | control_for_wago_touch_panels_600_sl | * | <built-in method update of dict object at 0x7e60bae0f300> | Application |
| codesys | control_rte_sl | * | <built-in method update of dict object at 0x7e61342e7fc0> | Application |
| codesys | control_rte_sl_\(for_beckhoff_cx\) | * | <built-in method update of dict object at 0x7e61109d6f80> | Application |
| codesys | control_runtime_system_toolkit | * | <built-in method update of dict object at 0x7e61342e6040> | Application |
| codesys | control_win_sl | * | <built-in method update of dict object at 0x7e611232c140> | Application |
| codesys | development_system | * | <built-in method update of dict object at 0x7e61342e5a00> | Application |
| codesys | hmi | * | <built-in method update of dict object at 0x7e6112e73c00> | Application |
| codesys | safety_sil2 | * | <built-in method update of dict object at 0x7e60bae0d380> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:* |