Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
3S has produced an update that is available for download from the 3S CODESYS Download page: http://www.codesys.com/support-training/self-help/downloads-updates.html
Please contact CODESYS Support for any additional questions concerning the update.