Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS. (CODESYS CODESYS Control RTE (SL))
At a glance
- Source
- NVD
- EPSS
- EPSS 1.04 % · percentile 64 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- CERTVDE
- NVD status
- Modified
Description
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.
Weaknesses (CWE)
- CWE-822 — Untrusted Pointer Dereference
- CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H | CERTVDE |
| CVSS 3.1 | HIGH 7.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H | NVD · info@cert.vde.com (Secondary) |
| CVSS 3.1 | HIGH 7.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 4.9 | AV:N/AC:M/Au:S/C:N/I:P/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-27660
- GCVE · GCVE-0-2022-22514
Affected configurations (NVD CPE)
cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*< 4.5.0.0cpe:2.3:a:codesys:control_for_beckhoff_cx9020:*:*:*:*:*:*:*:*< 4.5.0.0cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*< 4.5.0.0cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*< 4.5.0.0cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*< 4.5.0.0cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*< 4.5.0.0cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*< 4.5.0.0cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*< 4.5.0.0cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*< 4.5.0.0cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*< 4.5.0.0cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*< 3.5.18.0cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:*< 3.5.18.0cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*< 3.5.18.0cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*< 3.5.18.0cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*≥ 3.0 < 3.5.18.0cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*< 3.5.18.0cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*< 4.5.0.0cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:*< 3.5.18.0cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*< 3.5.18.0cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*< 3.5.18.0cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*< 3.5.18.0
Affected products
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |