Back to feed
EUVD-2023-41434 · Published Aug 3, 2023
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37549 and CVE-2023-37550
Technologies
Codesys Control For Empc-A\/Imx6 SlCodesys Control For Pfc200 SlCodesys Control Rte Sl \(For Beckhoff Cx\)Codesys Development SystemCodesys Control For Beaglebone SlCodesys Control For Iot2000 SlCodesys Control For Plcnext SlCodesys Control Rte SlCodesys Safety Sil2Codesys Control Win SlCodesys Control For Linux SlCodesys Control For Wago Touch Panels 600 SlCodesys HmiCodesys Control For Pfc100 SlCodesys Control Runtime System ToolkitCodesys Control For Raspberry Pi Sl
Weaknesses
CWE-20
CVSS scores
- v3.16.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
