Description
In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing the PLC.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CODESYS CODESYS V2
Runtime Toolkit 32 bit full to < V2.4.7.56affectedPLCWinNT to < V2.4.7.56affected
References
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16877&token=8faab0fc1e069f4edfca5d5aba8146139f67a175&download= ↗
- http://seclists.org/fulldisclosure/2021/Oct/64 ↗
- http://packetstormsecurity.com/files/164716/CODESYS-2.4.7.0-Denial-Of-Service.html ↗
- http://packetstormsecurity.com/files/165874/WAGO-750-8xxx-PLC-Denial-Of-Service-User-Enumeration.html ↗