Description
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CODESYS CODESYS Control for BeagleBone SL
Default version status: unaffected
0 to < 4.12.0.0affected
CODESYS CODESYS Control for emPC-A/iMX6 SL
Default version status: unaffected
0 to < 4.12.0.0affected
CODESYS CODESYS Control for IOT2000 SL
Default version status: unaffected
0 to < 4.12.0.0affected
CODESYS CODESYS Control for Linux ARM SL
Default version status: unaffected
0 to < 4.12.0.0affected
CODESYS CODESYS Control for Linux SL
Default version status: unaffected
0 to < 4.12.0.0affected
CODESYS CODESYS Control for PFC100 SL
Default version status: unaffected
0 to < 4.12.0.0affected
CODESYS CODESYS Control for PFC200 SL
Default version status: unaffected
0 to < 4.12.0.0affected
CODESYS CODESYS Control for PLCnext SL
Default version status: unaffected
0 to < 4.12.0.0affected
CODESYS CODESYS Control for Raspberry Pi SL
Default version status: unaffected
0 to < 4.12.0.0affected
CODESYS CODESYS Control for WAGO Touch Panels 600 SL
Default version status: unaffected
0 to < 4.12.0.0affected
CODESYS CODESYS Control RTE (for Beckhoff CX) SL
Default version status: unaffected
0 to < 3.5.20.10affected
CODESYS CODESYS Control RTE (SL)
Default version status: unaffected
0 to < 3.5.20.10affected
CODESYS CODESYS Runtime Toolkit
Default version status: unaffected
0 to < 3.5.20.10affected
CODESYS CODESYS Control Win (SL)
Default version status: unaffected
0 to < 3.5.20.10affected
CODESYS CODESYS HMI (SL)
Default version status: unaffected
0 to < 3.5.20.10affected