CVE-2024-5000
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.
- Score
- CVSS 3.1 7.5 High
- Status
- Deferred - info@cert.vde.com
- Published
- 2024-06-04
- Last modified
- 2024-08-01
- Weaknesses
- CWE-131
Affected products
- Codesys Control For Beaglebone Sl (Codesys)
- Codesys Control For Empc-aimx6 Sl (Codesys)
- Codesys Control For Iot2000 Sl (Codesys)
- Codesys Control For Linux Arm Sl (Codesys)
- Codesys Control For Linux Sl (Codesys)
- Codesys Control For Pfc100 Sl (Codesys)
- Codesys Control For Pfc200 Sl (Codesys)
- Codesys Control For Plcnext Sl (Codesys)
- Codesys Control For Raspberry Pi Sl (Codesys)
- Codesys Control For Wago Touch Panels 600 Sl (Codesys)
- Codesys Control Rte For Beckhoff Cx Sl (Codesys)
- Codesys Control Rte Sl (Codesys)
- Codesys Control Win Sl (Codesys)
- Codesys Hmi Sl (Codesys)
- Codesys Runtime Toolkit (Codesys)
- Control For Beaglebone Sl (Codesys)
- Control For Empc-a/imx6 Sl (Codesys)
- Control For Iot2000 Sl (Codesys)
- Control For Linux Arm Sl (Codesys)
- Control For Linux Sl (Codesys)
- Control For Pfc200 Sl (Codesys)
- Control For Plcnext Sl (Codesys)
- Control For Raspberry Pi Sl (Codesys)
- Control For Wago Touch Panels 600 Sl (Codesys)
- Control Rte (for Beckhoff Cx) Sl (Codesys)
- Control Rte (sl) (Codesys)
- Control Win (sl) (Codesys)
- Hmi (sl) (Codesys)
- Runtime Toolkit (Codesys)
References
- https://cert.vde.com/en/advisories/VDE-2024-026
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18355&token=e3e5a937ce72602bec39718ddc2f4ba6d983ccd1&downloa…
