Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-5000
PUBLISHED
More InfoOfficial Page
Assigner-CERTVDE
Assigner Org ID-270ccfa6-a436-4e77-922e-914ec3a9685c
View Known Exploited Vulnerability (KEV) details
Published At-04 Jun, 2024 | 08:54
Updated At-01 Aug, 2024 | 20:55
Rejected At-
▼CVE Numbering Authority (CNA)
CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products

An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.

Affected Products
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control for BeagleBone SL
Default Status
unaffected
Versions
Affected
  • From 0 before 4.12.0.0 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control for emPC-A/iMX6 SL
Default Status
unaffected
Versions
Affected
  • From 0 before 4.12.0.0 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control for IOT2000 SL
Default Status
unaffected
Versions
Affected
  • From 0 before 4.12.0.0 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control for Linux ARM SL
Default Status
unaffected
Versions
Affected
  • From 0 before 4.12.0.0 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control for Linux SL
Default Status
unaffected
Versions
Affected
  • From 0 before 4.12.0.0 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control for PFC100 SL
Default Status
unaffected
Versions
Affected
  • From 0 before 4.12.0.0 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control for PFC200 SL
Default Status
unaffected
Versions
Affected
  • From 0 before 4.12.0.0 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control for PLCnext SL
Default Status
unaffected
Versions
Affected
  • From 0 before 4.12.0.0 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control for Raspberry Pi SL
Default Status
unaffected
Versions
Affected
  • From 0 before 4.12.0.0 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control for WAGO Touch Panels 600 SL
Default Status
unaffected
Versions
Affected
  • From 0 before 4.12.0.0 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control RTE (for Beckhoff CX) SL
Default Status
unaffected
Versions
Affected
  • From 0 before 3.5.20.10 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control RTE (SL)
Default Status
unaffected
Versions
Affected
  • From 0 before 3.5.20.10 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Runtime Toolkit
Default Status
unaffected
Versions
Affected
  • From 0 before 3.5.20.10 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS Control Win (SL)
Default Status
unaffected
Versions
Affected
  • From 0 before 3.5.20.10 (semver)
Vendor
CODESYS GmbHCODESYS
Product
CODESYS HMI (SL)
Default Status
unaffected
Versions
Affected
  • From 0 before 3.5.20.10 (semver)
Problem Types
TypeCWE IDDescription
CWECWE-131CWE-131 Incorrect Calculation of Buffer Size
Type: CWE
CWE ID: CWE-131
Description: CWE-131 Incorrect Calculation of Buffer Size
Metrics
VersionBase scoreBase severityVector
3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
reporter
ABB Schweiz AG.
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://cert.vde.com/en/advisories/VDE-2024-026
N/A
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18355&token=e3e5a937ce72602bec39718ddc2f4ba6d983ccd1&download=
N/A
Hyperlink: https://cert.vde.com/en/advisories/VDE-2024-026
Resource: N/A
Hyperlink: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18355&token=e3e5a937ce72602bec39718ddc2f4ba6d983ccd1&download=
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Vendor
CODESYS GmbHcodesys
Product
control_for_empc-a\/imx6_sl
CPEs
  • cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 4.12.0.0 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_for_beaglebone_sl
CPEs
  • cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 4.12.0.0 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_for_iot2000_sl
CPEs
  • cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 4.12.0.0 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_for_linux_arm_sl
CPEs
  • cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 4.12.0.0 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_for_linux_sl
CPEs
  • cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 4.12.0.0 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_for_pfc200_sl
CPEs
  • cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 4.12.0.0 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_for_plcnext_sl
CPEs
  • cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 4.12.0.0 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_for_raspberry_pi_sl
CPEs
  • cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 4.12.0.0 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_for_wago_touch_panels_600_sl
CPEs
  • cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 4.12.0.0 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_rte_\(for_beckhoff_cx\)_sl
CPEs
  • cpe:2.3:a:codesys:control_rte_\(for_beckhoff_cx\)_sl:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 3.5.20.10 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_rte_\(sl\)
CPEs
  • cpe:2.3:a:codesys:control_rte_\(sl\):*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 3.5.20.10 (custom)
Vendor
CODESYS GmbHcodesys
Product
control_win_\(sl\)
CPEs
  • cpe:2.3:a:codesys:control_win_\(sl\):*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 3.5.20.10 (custom)
Vendor
CODESYS GmbHcodesys
Product
runtime_toolkit
CPEs
  • cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 3.5.20.10 (custom)
Vendor
CODESYS GmbHcodesys
Product
hmi_\(sl\)
CPEs
  • cpe:2.3:a:codesys:hmi_\(sl\):*:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • From 0 before 3.5.20.10 (custom)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
2. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://cert.vde.com/en/advisories/VDE-2024-026
x_transferred
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18355&token=e3e5a937ce72602bec39718ddc2f4ba6d983ccd1&download=
x_transferred
Hyperlink: https://cert.vde.com/en/advisories/VDE-2024-026
Resource:
x_transferred
Hyperlink: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18355&token=e3e5a937ce72602bec39718ddc2f4ba6d983ccd1&download=
Resource:
x_transferred
Details not found