| Package | Affected versions | Patched versions |
|---|---|---|
| control for beaglebone sl | < 4.10.0.0 | 4.10.0.0 |
| control for empc-a/imx6 sl | < 4.10.0.0 | 4.10.0.0 |
| control for iot2000 sl | < 4.10.0.0 | 4.10.0.0 |
| control for linux sl | < 4.10.0.0 | 4.10.0.0 |
| control for pfc100 sl | < 4.10.0.0 | 4.10.0.0 |
| control for pfc200 sl | < 4.10.0.0 | 4.10.0.0 |
| control for plcnext sl | < 4.10.0.0 | 4.10.0.0 |
| control for raspberry pi sl | < 4.10.0.0 | 4.10.0.0 |
| control for wago touch panels 600 sl | < 4.10.0.0 | 4.10.0.0 |
| control rte sl | < 3.5.19.20 | 3.5.19.20 |
| control rte sl (for beckhoff cx) | < 3.5.19.20 | 3.5.19.20 |
| control runtime system toolkit | < 3.5.19.20 | 3.5.19.20 |
| control win sl | < 3.5.19.20 | 3.5.19.20 |
| development system | < 3.5.19.20 | 3.5.19.20 |
| hmi | < 3.5.19.20 | 3.5.19.20 |
| safety sil2 | < 3.5.19.20 | 3.5.19.20 |
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free