CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2023-37545
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37546, CVE-2023-37547, CVE-2023-37548, CVE-2023-37549, CVE-2023-37550
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- codesys:control_for_beaglebone_sl
- codesys:control_for_empc-a\/imx6_sl
- codesys:control_for_iot2000_sl
- codesys:control_for_linux_sl
- codesys:control_for_pfc100_sl
- codesys:control_for_pfc200_sl
- codesys:control_for_plcnext_sl
- codesys:control_for_raspberry_pi_sl
- codesys:control_for_wago_touch_panels_600_sl
- codesys:control_rte_sl
- codesys:control_rte_sl_\(for_beckhoff_cx\)
- codesys:control_runtime_system_toolkit
- codesys:control_win_sl
- codesys:development_system
- codesys:hmi
- codesys:safety_sil2