Recherche « CODESYS Control for IOT2000 SL »

CODESYS Control RTE (SL) · CODESYS Control RTE (for Beckhoff CX) SL · CODESYS Control Win (SL) · CODESYS Runtime Toolkit

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial-of-service condition.

CODESYS Control RTE (SL) · CODESYS Control RTE (for Beckhoff CX) SL · CODESYS Control Win (SL) · CODESYS HMI (SL)

The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.

CODESYS Control RTE (SL) · CODESYS Control RTE (for Beckhoff CX) SL · CODESYS Control Win (SL) · CODESYS HMI (SL)

The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.