| Package | Affected versions | Patched versions |
|---|---|---|
| control for beaglebone sl | < 4.10.0.0 | 4.10.0.0 |
| control for empc-a/imx6 sl | < 4.10.0.0 | 4.10.0.0 |
| control for iot2000 sl | < 4.10.0.0 | 4.10.0.0 |
| control for linux sl | < 4.10.0.0 | 4.10.0.0 |
| control for pfc100 sl | < 4.10.0.0 | 4.10.0.0 |
| control for pfc200 sl | < 4.10.0.0 | 4.10.0.0 |
| control for plcnext sl | < 4.10.0.0 | 4.10.0.0 |
| control for raspberry pi sl | < 4.10.0.0 | 4.10.0.0 |
| control for wago touch panels 600 sl | < 4.10.0.0 | 4.10.0.0 |
| control rte sl | < 3.5.19.20 | 3.5.19.20 |
| control rte sl (for beckhoff cx) | < 3.5.19.20 | 3.5.19.20 |
| control runtime system toolkit | < 3.5.19.20 | 3.5.19.20 |
| control win sl | < 3.5.19.20 | 3.5.19.20 |
| development system | < 3.5.19.20 | 3.5.19.20 |
| hmi | < 3.5.19.20 | 3.5.19.20 |
| safety sil2 | < 3.5.19.20 | 3.5.19.20 |
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37549 and CVE-2023-37550
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free