medium6.5
CVE-2023-37549
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent…
Impact
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37548 and CVE-2023-37550
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Control For Beaglebone Sl | before 4.10.0.0 |
| Codesys | Control For Empc-A\/Imx6 Sl | before 4.10.0.0 |
| Codesys | Control For Iot2000 Sl | before 4.10.0.0 |
| Codesys | Control For Linux Sl | before 4.10.0.0 |
| Codesys | Control For Pfc100 Sl | before 4.10.0.0 |
| Codesys | Control For Pfc200 Sl | before 4.10.0.0 |
| Codesys | Control For Plcnext Sl | before 4.10.0.0 |
| Codesys | Control For Raspberry Pi Sl | before 4.10.0.0 |
| Codesys | Control For Wago Touch Panels 600 Sl | before 4.10.0.0 |
| Codesys | Control Rte Sl | before 3.5.19.20 |
| Codesys | Control Rte Sl \(For Beckhoff Cx\) | before 3.5.19.20 |
| Codesys | Control Runtime System Toolkit | before 3.5.19.20 |