The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCodesys Gateway
APPCodesys2.0 – 2.3.9.38 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
Related vulnerabilities
CVE-2022-31802CRITICAL9.8PL ✓same product
Nieprawidłowa weryfikacja hasła w CODESYS Gateway Server V2
CVE-2019-9010CRITICAL9.8PL ✓same product
CODESYS Gateway V3 — błędna weryfikacja właściciela kanału komunikacyjnego
CVE-2022-30791HIGH7.5same product
In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorize...
CVE-2022-30792HIGH7.5same product
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unautho...
CVE-2022-31805HIGH7.5same product
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the comm...