| Package | Affected versions | Patched versions |
|---|---|---|
| control for beaglebone sl | < 4.8.0.0 | 4.8.0.0 |
| control for empc-a/imx6 sl | < 4.8.0.0 | 4.8.0.0 |
| control for iot2000 sl | < 4.8.0.0 | 4.8.0.0 |
| control for linux sl | < 4.8.0.0 | 4.8.0.0 |
| control for pfc100 sl | < 4.8.0.0 | 4.8.0.0 |
| control for pfc200 sl | < 4.8.0.0 | 4.8.0.0 |
| control for plcnext sl | < 4.8.0.0 | 4.8.0.0 |
| control for raspberry pi sl | < 4.8.0.0 | 4.8.0.0 |
| control for wago touch panels 600 sl | < 4.8.0.0 | 4.8.0.0 |
| control rte (for beckhoff cx) sl | < 3.5.19.0 | 3.5.19.0 |
| control rte (sl) | < 3.5.19.0 | 3.5.19.0 |
| control runtime system toolkit | < 3.5.19.0 | 3.5.19.0 |
| control win (sl) | < 3.5.19.0 | 3.5.19.0 |
| development system v3 | < 3.5.19.0 | 3.5.19.0 |
| hmi (sl) | < 3.5.19.0 | 3.5.19.0 |
| safety sil2 psp | < 3.5.19.0 | 3.5.19.0 |
| safety sil2 runtime toolkit | < 3.5.19.0 | 3.5.19.0 |
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free