Recherche « CODESYS Control Win (SL) »

CODESYS Development System 3 · CODESYS Gateway · CODESYS Edge Gateway for Windows · CODESYS HMI (SL)

The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.

CODESYS Control RTE (SL) · CODESYS Control RTE (for Beckhoff CX) SL · CODESYS Control Win (SL) · CODESYS Runtime Toolkit

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial-of-service condition.

CODESYS Control RTE (SL) · CODESYS Control RTE (for Beckhoff CX) SL · CODESYS Control Win (SL) · CODESYS HMI (SL)

The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.

CODESYS Control RTE (SL) · CODESYS Control RTE (for Beckhoff CX) SL · CODESYS Control Win (SL) · CODESYS HMI (SL)

The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.