Lucene search

K
cvelistCERTVDECVELIST:CVE-2023-37554
HistoryAug 03, 2023 - 11:05 a.m.

CVE-2023-37554 CODESYS Improper Input Validation in CmpAppBP

2023-08-0311:05:09
CWE-20
CERTVDE
raw.githubusercontent.com
2
codesys
improper input validation
cmpappbp
denial-of-service

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different toΒ CVE-2023-37552,Β CVE-2023-37553, CVE-2023-37555 andΒ CVE-2023-37556.

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%

Related for CVELIST:CVE-2023-37554