Description
Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CODESYS V3 CODESYS Control RTE (SL)
Default version status: unaffected
V0.0.0.0 to < V3.5.18.40affected
CODESYS V3 CODESYS Control RTE (for Beckhoff CX) SL
Default version status: unaffected
V0.0.0.0 to < V3.5.18.40affected
CODESYS V3 CODESYS Control Win (SL)
Default version status: unaffected
V0.0.0.0 to < V3.5.18.40affected
CODESYS V3 CODESYS HMI (SL)
Default version status: unaffected
V0.0.0.0 to < V3.5.18.40affected
CODESYS V3 CODESYS Control Runtime System Toolkit
Default version status: unaffected
V0.0.0.0 to < V3.5.18.40affected
CODESYS V3 CODESYS Control for BeagleBone SL
Default version status: unaffected
V0.0.0.0 to < V4.7.0.0affected
CODESYS V3 CODESYS Control for emPC-A/iMX6 SL
Default version status: unaffected
V0.0.0.0 to < V4.7.0.0affected
CODESYS V3 CODESYS Control for IOT2000 SL
Default version status: unaffected
V0.0.0.0 to < V4.7.0.0affected
CODESYS V3 CODESYS Control for Linux SL
Default version status: unaffected
V0.0.0.0 to < V4.7.0.0affected
CODESYS V3 CODESYS Control for PFC100 SL
Default version status: unaffected
V0.0.0.0 to < V4.7.0.0affected
CODESYS V3 CODESYS Control for PFC200 SL
Default version status: unaffected
V0.0.0.0 to < V4.7.0.0affected
CODESYS V3 CODESYS Control for PLCnext SL
Default version status: unaffected
V0.0.0.0 to < V4.7.0.0affected
CODESYS V3 CODESYS Control for Raspberry Pi SL
Default version status: unaffected
V0.0.0.0 to < V4.7.0.0affected
CODESYS V3 CODESYS Control for WAGO Touch Panels 600 SL
Default version status: unaffected
V0.0.0.0 to < V4.7.0.0affected