In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCodesys Control For Beaglebone
APPCodesys< 4.5.0.0Codesys Control For Empc A\/imx6
APPCodesys< 4.5.0.0Codesys Control For Iot2000 Sl
APPCodesys< 4.6.0.0Codesys Control For Linux Sl
APPCodesys< 4.5.0.0Codesys Control For Pfc100 Sl
APPCodesys< 4.5.0.0Codesys Control For Pfc200 Sl
APPCodesys< 4.5.0.0Codesys Control For Plcnext
APPCodesys< 4.6.0.0Codesys Control For Raspberry Pi Sl
APPCodesys< 4.5.0.0Codesys Control For Wago Touch Panels 600
APPCodesys< 4.5.0.0Codesys Control Rte Sl
APPCodesys< 3.5.18.20Codesys Control Rte Sl \(for Beckhoff Cx\)
APPCodesys< 3.5.18.20Codesys Control Runtime System Toolkit
APPCodesys< 3.5.18.20Codesys Control Win
APPCodesys< 3.5.18.20Codesys Development System
APPCodesys< 3.5.18.20Codesys Edge Gateway
APPCodesys< 3.5.18.20< 4.5.0.0Codesys Embedded Target Visu Toolkit
APPCodesys< 3.5.18.20Codesys Gateway
APPCodesys< 3.5.18.20Codesys Hmi
APPCodesys< 3.5.18.20Codesys Remote Target Visu Toolkit
APPCodesys< 3.5.18.20
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2022-31802CRITICAL9.8PL ✓ten sam produkt
Nieprawidłowa weryfikacja hasła w CODESYS Gateway Server V2
CVE-2021-33485CRITICAL9.8PL ✓ten sam produkt
Heap-based Buffer Overflow w CODESYS Control Runtime przed wersją 3.5.17.10
CVE-2020-10245CRITICAL9.8PL ✓ten sam produkt
Buffer overflow w serwerze web CODESYS V3 umożliwiający RCE
CVE-2019-18858CRITICAL9.8PL ✓ten sam produkt
Buffer Overflow w serwerze WWW CODESYS 3 — zdalne wykonanie kodu
CVE-2019-13548CRITICAL9.8PL ✓ten sam produkt
Stack overflow w CODESYS V3 web server umożliwiający RCE