After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition.
References
| Link | Resource |
|---|---|
| https://cert.vde.com/en/advisories/VDE-2023-019/ | Third Party Advisory |
| https://cert.vde.com/en/advisories/VDE-2023-019/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 08:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert.vde.com/en/advisories/VDE-2023-019/ - Third Party Advisory |
08 Aug 2023, 15:43
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://cert.vde.com/en/advisories/VDE-2023-019/ - Third Party Advisory |
03 Aug 2023, 12:40
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-03 12:15
Updated : 2024-11-21 08:11
NVD link : CVE-2023-37557
Mitre link : CVE-2023-37557
CVE.ORG link : CVE-2023-37557
JSON object : View
Products Affected
codesys
- control_for_beaglebone_sl
- control_for_empc-a\/imx6_sl
- control_for_raspberry_pi_sl
- control_for_pfc100_sl
- control_for_wago_touch_panels_600_sl
- control_win_sl
- control_rte_sl_\(for_beckhoff_cx\)
- hmi
- control_for_linux_sl
- control_rte_sl
- control_runtime_system_toolkit
- development_system
- control_for_plcnext_sl
- control_for_iot2000_sl
- safety_sil2
- control_for_pfc200_sl
CWE
CWE-787
Out-of-bounds Write