CVE-2024-6876

Out-of-bounds read in OSCAT-Library

State: Published
Severity: 4.4 Medium
Published: Sep 10, 2024
Updated: Oct 1, 2024
Reserved: Jul 18, 2024

Description

Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service.

Scores

CVSS	Score	Vector	Source
3.1	4.4 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L	CERTVDE

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
OSCAT Basic Libraryoscat.de	before 3.3.5Affected
OSCAT Basic Libraryoscat.de	before 335Affected
OSCAT Basic LibraryCODESYS	0.0.0 to before <3.3.5.0Affected

References

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18601&token=27389a52e058d95ff70b17a2370fedf07e073034&download=
https://certvde.com/en/advisories/VDE-2024-046/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.