ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-37549

—
CVSS 3.1
6.5 medium
EPSS
<1%p48
Published
()
Modified
Description

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37548 and CVE-2023-37550

Vendors
codesys
Products
control for beaglebone sl, control for empc-a\/imx6 sl, control for iot2000 sl, control for linux sl, control for pfc100 sl, control for pfc200 sl, control for plcnext sl, control for raspberry pi sl, control for wago touch panels 600 sl, control rte sl, control rte sl \(for beckhoff cx\), control runtime system toolkit
Weakness
CWE-20
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

No ingested article mentions this CVE yet.