Vulnerability · Published Jun 4, 2024 · Assigned by CERTVDE
CVE-2024-5000CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
High 7.5
In plain English
A high-severity security flaw in CODESYS Control for BeagleBone SL from CODESYS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 52.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| CODESYS | CODESYS Control for BeagleBone SL | 0 – before 4.12.0.0 |
| CODESYS | CODESYS Control for emPC-A/iMX6 SL | 0 – before 4.12.0.0 |
| CODESYS | CODESYS Control for IOT2000 SL | 0 – before 4.12.0.0 |
| CODESYS | CODESYS Control for Linux ARM SL | 0 – before 4.12.0.0 |
| CODESYS | CODESYS Control for Linux SL | 0 – before 4.12.0.0 |
| CODESYS | CODESYS Control for PFC100 SL | 0 – before 4.12.0.0 |
| CODESYS | CODESYS Control for PFC200 SL | 0 – before 4.12.0.0 |
| CODESYS | CODESYS Control for PLCnext SL | 0 – before 4.12.0.0 |
| CODESYS | CODESYS Control for Raspberry Pi SL | 0 – before 4.12.0.0 |
| CODESYS | CODESYS Control for WAGO Touch Panels 600 SL | 0 – before 4.12.0.0 |
| CODESYS | CODESYS Control RTE (for Beckhoff CX) SL | 0 – before 3.5.20.10 |
| CODESYS | CODESYS Control RTE (SL) | 0 – before 3.5.20.10 |
| CODESYS | CODESYS Runtime Toolkit | 0 – before 3.5.20.10 |
| CODESYS | CODESYS Control Win (SL) | 0 – before 3.5.20.10 |
| CODESYS | CODESYS HMI (SL) | 0 – before 3.5.20.10 |
Weakness: CWE-131 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H