Design/Logic Flaw

2022-04-0719:15:00

PRIOn knowledge base

www.prio-n.com

0.003 Low

EPSS

Percentile

69.7%

JSON

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.

CPENameOperatorVersion
control_for_beaglebone_sllt4.5.0.0
control_for_beckhoff_cx9020lt4.5.0.0
control_for_empc-a\\/imx6_sllt4.5.0.0
control_for_iot2000_sllt4.5.0.0
control_for_linux_sllt4.5.0.0
control_for_pfc100_sllt4.5.0.0
control_for_pfc200_sllt4.5.0.0
control_for_plcnext_sllt4.5.0.0
control_for_raspberry_pi_sllt4.5.0.0
control_for_wago_touch_panels_600_sllt4.5.0.0

Name	Operator	Version
control_for_beaglebone_sl	lt	4.5.0.0
control_for_beckhoff_cx9020	lt	4.5.0.0
control_for_empc-a\\/imx6_sl	lt	4.5.0.0
control_for_iot2000_sl	lt	4.5.0.0
control_for_linux_sl	lt	4.5.0.0
control_for_pfc100_sl	lt	4.5.0.0
control_for_pfc200_sl	lt	4.5.0.0
control_for_plcnext_sl	lt	4.5.0.0
control_for_raspberry_pi_sl	lt	4.5.0.0
control_for_wago_touch_panels_600_sl	lt	4.5.0.0