CMPapp Component Arbitrary File Load

The vulnerability of the CMPapp component in CODESYS software products is related to the use of files and directories accessible from external parties. Exploiting this vulnerability allows a malicious actor to upload arbitrary files into the system remotely...

CMPapp Component DoS

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPapp Component DoS

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPapp Component DoS

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CMPapp Component Codesys DoS Execution Code

The vulnerability of the CMPapp component in the Codesys industrial automation software suite relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause system failures or execute arbitrary code...

CMPapp Component Codesys DoS Execution Code

The vulnerability of the CMPapp component in the Codesys industrial automation software suite relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to trigger malfunctions in service operations or execute arbitrary...

PT-2023-5016 · 3S Smart Software Solutions · Codesys Cmpapp

Name of the Vulnerable Software and Affected Versions: CODESYS CMPapp affected versions not specified Description: The issue is related to insufficient input validation in the CMPapp component of CODESYS software products. This can be exploited by a remote attacker to cause a denial of service...