After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37558
History

Fri, 11 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published: 2023-08-03T11:06:56.079Z

Updated: 2024-10-11T18:09:05.823Z

Reserved: 2023-07-07T07:39:19.122Z

Link: CVE-2023-37559

cve-icon Vulnrichment

Updated: 2024-08-02T17:16:30.700Z

cve-icon NVD

Status : Modified

Published: 2023-08-03T12:15:10.977

Modified: 2024-11-21T08:11:56.653

Link: CVE-2023-37559

cve-icon Redhat

No data.