Description (CNA)
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CODESYS / Development System 3 | affected 3.0.0.0 before 3.5.22.40 |
| CODESYS / Gateway | affected 3.0.0.0 before 3.5.22.40 |
| CODESYS / Edge Gateway for Windows | affected 3.0.0.0 before 3.5.22.40 |
| CODESYS / HMI (SL) | affected 3.0.0.0 before 3.5.22.40 |
| CODESYS / OPC DA Server SL | affected 3.0.0.0 before 3.5.22.40 |
| CODESYS / PLCHandler | affected 3.0.0.0 before 3.5.22.40 |
| CODESYS / Runtime Toolkit | affected 3.0.0.0 before 3.5.22.40 |
| CODESYS / Edge Gateway for Linux | affected 3.15.0.0 before 4.23.0.0 |
CWE
CWE-770
References
ADP enrichment
No English description supplied.
No references supplied.