CODESYS: Multiple products prone to stack based out-of-bounds write
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 1.3%
exploitation probability
1.3%top 31% of all CVEs
observed exploitation
nono source reports it
In short
A flaw in CODESYS products allows an authenticated attacker to write data beyond the intended memory limits on the stack, potentially crashing the system, corrupting memory, or executing malicious code.
Technical detail
Stack-based buffer overflow vulnerability in CODESYS products exploitable by authenticated remote attackers through improper bounds checking. The out-of-bounds write can corrupt stack memory, leading to DoS, memory corruption, or code execution depending on exploit payload and target architecture.
Summary generated and translated by AI from the official description.
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
CODESYS · CODESYS Control for BeagleBone SLCODESYS · CODESYS Control for emPC-A/iMX6 SLCODESYS · CODESYS Control for IOT2000 SLCODESYS · CODESYS Control for Linux SLCODESYS · CODESYS Control for PFC100 SLCODESYS · CODESYS Control for PFC200 SLCODESYS · CODESYS Control for PLCnext SLCODESYS · CODESYS Control for Raspberry Pi SLCODESYS · CODESYS Control for WAGO Touch Panels 600 SLCODESYS · CODESYS Control RTE (for Beckhoff CX) SLCODESYS · CODESYS Control RTE (SL)CODESYS · CODESYS Control Runtime System ToolkitCODESYS · CODESYS Control Win (SL)CODESYS · CODESYS Development System V3CODESYS · CODESYS HMI (SL)CODESYS · CODESYS Safety SIL2 PSPCODESYS · CODESYS Safety SIL2 Runtime Toolkit