CVE-2023-37557

Name of the Vulnerable Software and Affected Versions CODESYS versions (affected versions not specified)

Description The issue is related to a buffer overflow in the memory of the CMPappBP component of CODESYS products. This can be exploited by a remote attacker to cause a denial-of-service condition. The exploitation requires successful authentication as a user in the affected CODESYS products. Specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, leading to the denial-of-service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.