Vulnerability · Published Sep 10, 2024 · Assigned by CERTVDE
CVE-2024-6876Out-of-bounds read in OSCAT-Library
Medium 4.4
In plain English
A medium-severity out-of-bounds read in OSCAT Basic Library from CODESYS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.2%top 91.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| oscat.de | OSCAT Basic Library | 0 – before 3.3.5 |
| oscat.de | OSCAT Basic Library | 0 – before 335 |
| CODESYS | OSCAT Basic Library | 0.0.0 – before <3.3.5.0 |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L