CVE-2024-8175

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.

Score

CVSS 3.1 7.5 High

Status

Deferred - info@cert.vde.com

Published

2024-09-25

Last modified

2024-09-25

Weaknesses

CWE-754

Affected products

• Codesys Control For Beaglebone Sl (Codesys)
• Codesys Control For Empc-aimx6 Sl (Codesys)
• Codesys Control For Iot2000 Sl (Codesys)
• Codesys Control For Linux Arm Sl (Codesys)
• Codesys Control For Linux Sl (Codesys)
• Codesys Control For Pfc100 Sl (Codesys)
• Codesys Control For Pfc200 Sl (Codesys)
• Codesys Control For Plcnext Sl (Codesys)
• Codesys Control For Raspberry Pi Sl (Codesys)
• Codesys Control For Wago Touch Panels 600 Sl (Codesys)
• Codesys Control Rte For Beckhoff Cx Sl (Codesys)
• Codesys Control Rte Sl (Codesys)
• Codesys Control Win Sl (Codesys)
• Codesys Embedded Target Visu Toolkit (Codesys)
• Codesys Hmi Sl (Codesys)
• Codesys Remote Target Visu Toolkit (Codesys)
• Codesys Runtime Toolkit (Codesys)
• Codesys Virtual Control Sl (Codesys)
• Control For Beaglebone Sl (Codesys)
• Control For Empc-a/imx6 Sl (Codesys)
• Control For Iot2000 Sl (Codesys)
• Control For Linux Arm Sl (Codesys)
• Control For Linux Sl (Codesys)
• Control For Pfc100 Sl (Codesys)
• Control For Pfc200 Sl (Codesys)
• Control For Plcnext Sl (Codesys)
• Control For Raspberry Pi Sl (Codesys)
• Control For Wago Touch Panels 600 Sl (Codesys)
• Control Rte (for Beckhoff Cx) Sl (Codesys)
• Control Rte Sl (Codesys)
• Control Win Sl (Codesys)
• Embedded Target Visu Toolkit (Codesys)
• Hmi Sl (Codesys)
• Remote Target Visu Toolkit (Codesys)
• Runtime Toolkit (Codesys)
• Virtual Control Sl (Codesys)

References

• https://cert.vde.com/en/advisories/VDE-2024-057
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18604&token=d5e1e2820ee63077b875b3bb41014b1f102e88a3&downloa…