Description
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Affected Platforms
Codesys Control Rte \(For Beckhoff Cx\) SlCodesys Control For Raspberry Pi SlCodesys Control For Plcnext SlCodesys Control For Empc-A\/Imx6 SlCodesys Control For Wago Touch Panels 600 SlCodesys Hmi \(Sl\)Codesys Development System V3Codesys Safety Sil2 PspCodesys Control Runtime System ToolkitCodesys Control For Pfc200 Sl