Description
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CODESYS CODESYS Control RTE (SL)
Default version status: unaffected
3.5.17.0 to < 3.5.22.0affected
CODESYS CODESYS Control RTE (for Beckhoff CX) SL
Default version status: unaffected
3.5.17.0 to < 3.5.22.0affected
CODESYS CODESYS Control Win (SL)
Default version status: unaffected
3.5.17.0 to < 3.5.22.0affected
CODESYS CODESYS Runtime Toolkit
Default version status: unaffected
3.5.17.0 to < 3.5.22.0affected
CODESYS CODESYS Control for BeagleBone SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected
CODESYS CODESYS Control for emPC-A/iMX6 SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected
CODESYS CODESYS Control for IOT2000 SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected
CODESYS CODESYS Control for Linux ARM SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected
CODESYS CODESYS Control for Linux SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected
CODESYS CODESYS Control for PFC100 SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected
CODESYS CODESYS Control for PFC200 SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected
CODESYS CODESYS Control for PLCnext SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected
CODESYS CODESYS Control for Raspberry Pi SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected
CODESYS CODESYS Control for WAGO Touch Panels 600 SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected
CODESYS CODESYS Virtual Control SL
Default version status: unaffected
4.1.0.0 to < 4.21.0.0affected