Riskcovery

CVE-2024-8175

CODESYS: web server vulnerable to DoS

State
Published
Severity
7.5 High
Published
Sep 25, 2024
Updated
Sep 25, 2024
Reserved
Aug 26, 2024

Read the record on cve.org

Description

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCERTVDE

Weaknesses

  • CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

ProductVersions
CODESYS Control for BeagleBone SLCODESYS
  • before 4.14.0.0Affected
CODESYS Control for emPC-A/iMX6 SLCODESYS
  • before 4.14.0.0Affected
CODESYS Control for IOT2000 SLCODESYS
  • before 4.14.0.0Affected
CODESYS Control for Linux ARM SLCODESYS
  • before 4.14.0.0Affected
CODESYS Control for Linux SLCODESYS
  • before 4.14.0.0Affected
CODESYS Control for PFC100 SLCODESYS
  • before 4.14.0.0Affected
CODESYS Control for PFC200 SLCODESYS
  • before 4.14.0.0Affected
CODESYS Control for PLCnext SLCODESYS
  • before 4.14.0.0Affected
CODESYS Control for Raspberry Pi SLCODESYS
  • before 4.14.0.0Affected
CODESYS Control for WAGO Touch Panels 600 SLCODESYS
  • before 4.14.0.0Affected
CODESYS Control RTE (for Beckhoff CX) SLCODESYS
  • before 3.5.20.30Affected
CODESYS Control RTE (SL)CODESYS
  • before 3.5.20.30Affected
CODESYS Control Win (SL)CODESYS
  • before 3.5.20.30Affected
CODESYS Embedded Target Visu ToolkitCODESYS
  • before 3.5.20.30Affected
CODESYS HMI (SL)CODESYS
  • before 3.5.20.30Affected
CODESYS Remote Target Visu ToolkitCODESYS
  • before 3.5.20.30Affected
CODESYS Runtime ToolkitCODESYS
  • before 3.5.20.30Affected
CODESYS Virtual Control SLCODESYS
  • before 4.14.0.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.