CVE-2021-34593

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56

Description: The issue allows unauthenticated crafted invalid requests to result in several denial-of-service conditions. This can cause running PLC programs to be stopped, memory to be leaked, or further communication clients to be blocked from accessing the PLC.

Recommendations: For versions prior to V2.4.7.56, update to version V2.4.7.56 or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.