Uncontrolled Memory Allocation in CODESYS Gateway Client
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Development System 3
Vendor
CODESYS
Product
Development System 3
Platforms
Unknown
Default status
unaffected
Development System 3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.0.0.0
affected
generic
3.5.22.40
Unavailable
None listed
Gateway
Vendor
CODESYS
Product
Gateway
Platforms
Unknown
Default status
unaffected
Gateway · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.0.0.0
affected
generic
3.5.22.40
Unavailable
None listed
Edge Gateway for Windows
Vendor
CODESYS
Product
Edge Gateway for Windows
Platforms
Unknown
Default status
unaffected
Edge Gateway for Windows · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.0.0.0
affected
generic
3.5.22.40
Unavailable
None listed
HMI (SL)
Vendor
CODESYS
Product
HMI (SL)
Platforms
Unknown
Default status
unaffected
HMI (SL) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.0.0.0
affected
generic
3.5.22.40
Unavailable
None listed
OPC DA Server SL
Vendor
CODESYS
Product
OPC DA Server SL
Platforms
Unknown
Default status
unaffected
OPC DA Server SL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.0.0.0
affected
generic
3.5.22.40
Unavailable
None listed
PLCHandler
Vendor
CODESYS
Product
PLCHandler
Platforms
Unknown
Default status
unaffected
PLCHandler · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.0.0.0
affected
generic
3.5.22.40
Unavailable
None listed
Runtime Toolkit
Vendor
CODESYS
Product
Runtime Toolkit
Platforms
Unknown
Default status
unaffected
Runtime Toolkit · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.0.0.0
affected
generic
3.5.22.40
Unavailable
None listed
Edge Gateway for Linux
Vendor
CODESYS
Product
Edge Gateway for Linux
Platforms
Unknown
Default status
unaffected
Edge Gateway for Linux · Scoped product and version facts