CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.
Description: CWE-823 Use of Out-of-range Pointer Offset
Metrics
Version
Base score
Base severity
Vector
3.1
8.1
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Version:3.1
Base score:8.1
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Metrics Other Info
Impacts
CAPEC ID
Description
Solutions
CODESYS GmbH has released the following product versions to solve the noted vulnerability issue for the affected CODESYS products:
* CODESYS Runtime Toolkit 32 bit full version V2.4.7.56
* CODESYS PLCWinNT version V2.4.7.56. This will also be part of the CODESYS Development System setup version V2.3.9.68.
Configurations
Workarounds
Exploits
Credits
This issue was reported by Chen Jie and Gao Jian of NSFOCUS.