Denis Goryushev

The issue allows any system user to read and write within restricted memory space due to a problem in the SysDrv3S driver.

The issue is related to a NULL Pointer Dereference in the affected CODESYS products. Crafted communication requests may cause a Null pointer dereference, resulting in a denial-of-service condition. An attacker, acting remotely, can exploit this issue by sending a specially crafted TCP packet.

The issue is a stack-based buffer overflow in the CODESYS V2 runtime system SP. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information.