Description (CNA)
An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, potentially leading to a denial-of-service (DoS) condition.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CODESYS / Control RTE (SL) | affected 3.5.21.10 before 3.5.21.20 |
| CODESYS / Control RTE (for Beckhoff CX) SL | affected 3.5.21.10 before 3.5.21.20 |
| CODESYS / Control Win (SL) | affected 3.5.21.10 before 3.5.21.20 |
| CODESYS / HMI (SL) | affected 3.5.21.10 before 3.5.21.20 |
| CODESYS / Control for BeagleBone SL | affected 4.16.0.0 before 4.17.0.0 |
| CODESYS / Control for emPC-A/iMX6 SL | affected 4.16.0.0 before 4.17.0.0 |
| CODESYS / Control for IOT2000 SL | affected 4.16.0.0 before 4.17.0.0 |
| CODESYS / Control for Linux ARM SL | affected 4.16.0.0 before 4.17.0.0 |
| CODESYS / Control for Linux SL | affected 4.16.0.0 before 4.17.0.0 |
| CODESYS / Control for PFC100 SL | affected 4.16.0.0 before 4.17.0.0 |
| CODESYS / Control for PFC200 SL | affected 4.16.0.0 before 4.17.0.0 |
| CODESYS / Control for PLCnext SL | affected 4.16.0.0 before 4.17.0.0 |
| CODESYS / Control for Raspberry Pi SL | affected 4.16.0.0 before 4.17.0.0 |
| CODESYS / Control for WAGO Touch Panels 600 SL | affected 4.16.0.0 before 4.17.0.0 |
| CODESYS / Virtual Control SL | affected 4.16.0.0 before 4.17.0.0 |
CWE
CWE-476
References
ADP enrichment
No English description supplied.
No references supplied.