Description
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CODESYS CODESYS Control for BeagleBone SL
Default version status: unaffected
0 to < V4.10.0.0affected
CODESYS CODESYS Control for emPC-A/iMX6 SL
Default version status: unaffected
0 to < V4.10.0.0affected
CODESYS CODESYS Control for IOT2000 SL
Default version status: unaffected
0 to < V4.10.0.0affected
CODESYS CODESYS Control for Linux SL
Default version status: unaffected
0 to < V4.10.0.0affected
CODESYS CODESYS Control for PFC100 SL
Default version status: unaffected
0 to < V4.10.0.0affected
CODESYS CODESYS Control for PFC200 SL
Default version status: unaffected
0 to < V4.10.0.0affected
CODESYS CODESYS Control for PLCnext SL
Default version status: unaffected
0 to < V4.10.0.0affected
CODESYS CODESYS Control for Raspberry Pi SL
Default version status: unaffected
0 to < V4.10.0.0affected
CODESYS CODESYS Control for WAGO Touch Panels 600 SL
Default version status: unaffected
0 to < V4.10.0.0affected
CODESYS CODESYS Control RTE (for Beckhoff CX) SL
Default version status: unaffected
0 to < V3.5.19.20affected
CODESYS CODESYS Control RTE (SL)
Default version status: unaffected
0 to < V3.5.19.20affected
CODESYS CODESYS Control Runtime System Toolkit
Default version status: unaffected
0 to < V3.5.19.20affected
CODESYS CODESYS Control Win (SL)
Default version status: unaffected
0 to < V3.5.19.20affected
CODESYS CODESYS Development System V3
Default version status: unaffected
0 to < V3.5.19.20affected
CODESYS CODESYS HMI (SL)
Default version status: unaffected
0 to < V3.5.19.20affected
CODESYS CODESYS Safety SIL2 Runtime Toolkit
Default version status: unaffected
0 to < V3.5.19.20affected