Most recent entries from csaf_codesysgmbh

VDE-2023-024 — CODESYS: Vulnerability in CODESYS Development System and CODESYS Scripting

Fri, 28 Jul 2023 07:45:00 +0000

In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

VDE-2023-019 — CODESYS: Multiple Vulnerabilities in CmpApp CmpAppBP and CmpAppForce

Thu, 03 Aug 2023 10:42:00 +0000

CODESYS Control V3 runtime systems are affected by several security vulnerabilities in the communication server implementations for the CODESYS protocol. These may be exploited by authenticated attackers.

VDE-2023-021 — CODESYS: Vulnerability in CODESYS Development System allows execution of binaries

Thu, 03 Aug 2023 10:48:00 +0000

The CODESYS Development System is vulnerable to the execution of malicious binaries from the current working directory.

VDE-2023-022 — CODESYS: Missing integrity check in CODESYS Development System

Thu, 03 Aug 2023 10:52:00 +0000

The Notification Center of the CODESYS Development System receives messages without ensuring that the message was not modified during transmission. This finally enables MITMs code execution when the user clicks the "Learn More" button.

VDE-2023-023 — CODESYS: Missing Brute-Force protection in CODESYS Development System

Thu, 03 Aug 2023 11:08:00 +0000

The CODESYS Development System does not limit the number of attempts to guess the password within an import dialog.

VDE-2023-025 — CODESYS: Control runtime system memory and integrity check vulnerabilities

Thu, 03 Aug 2023 11:18:00 +0000

The CODESYS Control V3 runtime system does not restrict the memory accesses of the PLC application code to the PLC application data and does not sufficiently check the integrity of the application code by default. This could be exploited by authenticated PLC programmers.

VDE-2023-035 — CODESYS: Multiple products affected by WIBU Codemeter vulnerability

Tue, 05 Dec 2023 07:00:00 +0000

Several CODESYS setups contain and install vulnerable versions of the WIBU CodeMeter Runtime.

VDE-2023-066 — CODESYS: OS Command Injection Vulnerability in multiple CODESYS Control products

Tue, 05 Dec 2023 14:25:00 +0000

UPDATE 29.02.2024: Removed "This version is planned for January 2024." from Solution as the updated version is released.On CODESYS Control runtimes running on Linux or QNX operating systems, successfully authenticated PLC programmers can utilize SysFile or CAA-File system libraries to inject calls to additional shell functions.

VDE-2024-046 — OSCAT: Out-of-bounds read in OSCAT Basic library

Tue, 10 Sep 2024 14:00:00 +0000

Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service.

Advisory2024-05_VDE-2024-057 — CODESYS: CODESYS web server vulnerable to DoS

Wed, 25 Sep 2024 21:59:00 +0000

The CODESYS web server component of the CODESYS Control runtime system is used by the CODESYS WebVisu to display visualization screens in a web browser. Receiving a specifically crafted TLS packet on an HTTPS connection causes the CODESYS web server to crash because the return value of an underlying function is not checked correctly for such unusual conditions.