https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:11:35 +0000 https://cve.radiocsirt.org/vuln/advisory2026-11_vde-2026-094 <p>The CODESYS Gateway Client (CmpGatewayClient) is used by various CODESYS products to establish PLC communication via the CODESYS Gateway.</p> <p>Due to missing limits on memory allocations derived from a size field in a gateway response, a malicious gateway can cause excessive memory consumption in the client, resulting in a denial-of-service condition.</p> <p>The vulnerability can be exploited when an affected product connects to an attacker-controlled gateway.</p> <p>The CODESYS Gateway Client (CmpGatewayClient) is used by various CODESYS products to establish PLC communication via the CODESYS Gateway.</p> <p>Due to missing limits on memory allocations derived from a size field in a gateway response, a malicious gateway can cause excessive memory consumption in the client, resulting in a denial-of-service condition.</p> <p>The vulnerability can be exploited when an affected product connects to an attacker-controlled gateway.</p> https://cve.radiocsirt.org/vuln/advisory2026-11_vde-2026-094 https://cve.radiocsirt.org/vuln/euvd-2026-379294 EUVD-2026-379294 https://cve.radiocsirt.org/vuln/euvd-2026-379294 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76992 <p>The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.</p> <p>The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-76992 https://cve.radiocsirt.org/vuln/ghsa-cm9r-92x3-hmfj <p>The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.</p> <p>The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.</p> https://cve.radiocsirt.org/vuln/ghsa-cm9r-92x3-hmfj https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3688 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CODESYS Gateway Client ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CODESYS Gateway Client ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3688