Description
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CODESYS CODESYS Control RTE (SL)
V3.5.18.0 to < V3.5.18.0affected
CODESYS CODESYS Control RTE (for Beckhoff CX) SL
V3.5.18.0 to < V3.5.18.0affected
CODESYS CODESYS Control Win (SL)
V3.5.18.0 to < V3.5.18.0affected
CODESYS CODESYS Gateway
V3.5.18.0 to < V3.5.18.0affected
CODESYS CODESYS Edge Gateway for Windows
V3.5.18.0 to < V3.5.18.0affected
CODESYS CODESYS HMI (SL)
V3.5.18.0 to < V3.5.18.0affected
CODESYS CODESYS Development System V3
V3.5.18.0 to < V3.5.18.0affected
CODESYS CODESYS Control Runtime System Toolkit
V3.5.18.0 to < V3.5.18.0affected
CODESYS CODESYS Embedded Target Visu Toolkit
V3.5.18.0 to < V3.5.18.0affected
CODESYS CODESYS Remote Target Visu Toolkit
V3.5.18.0 to < V3.5.18.0affected
CODESYS CODESYS Control for BeagleBone SL
V4.5.0.0 to < V4.5.0.0affected
CODESYS CODESYS Control for Beckhoff CX9020 SL
V4.5.0.0 to < V4.5.0.0affected
CODESYS CODESYS Control for emPC-A/iMX6 SL
V4.5.0.0 to < V4.5.0.0affected
CODESYS CODESYS Control for IOT2000 SL
V4.5.0.0 to < V4.5.0.0affected
CODESYS CODESYS Control for Linux SL
V4.5.0.0 to < V4.5.0.0affected
CODESYS CODESYS Control for PFC100 SL
V4.5.0.0 to < V4.5.0.0affected
CODESYS CODESYS Control for PFC200 SL
V4.5.0.0 to < V4.5.0.0affected
CODESYS CODESYS Control for PLCnext SL
V4.5.0.0 to < V4.5.0.0affected
CODESYS CODESYS Control for Raspberry Pi SL
V4.5.0.0 to < V4.5.0.0affected
CODESYS CODESYS Control for WAGO Touch Panels 600 SL
V4.5.0.0 to < V4.5.0.0affected
CODESYS CODESYS Edge Gateway for Linux
V4.5.0.0 to < V4.5.0.0affected