Summary
An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory.
An attacker who successfully exploited these vulnerabilities could call shell functions (CVE-2023-6357),
crash the PLC (CVE-2024-5000), crash the web server of the PLC (CVE-2024-8175), grant read access to
files (CVE-2024-12429) or enable command execution (CVE-2024-12430).
The vulnerabilities CVE-2023-6357, CVE-2024-12429 and CVE-2024-12430 require successful authentication.
Vulnerabilities 5
-
High 8.8
OS Command Injection in multiple CODESYS products
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.
-
High 7.5
CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.
-
High 7.5
CODESYS: web server vulnerable to DoS
An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.
-
High 7.0
An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exis…
-
Medium 4.3
An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists i…
Revision history
-
#1
Initial version.
References
-
ABB CYBERSECURITY ADVISORY - PDF version
https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch
-
CVE-2023-6357: CODESYS Control V3 on Linux and QNX operating systems
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18027&token=43109051cf95d3445bc616e4efb8414336ebcc47&download=
-
CVE-2024-5000: CODESYS Control V3 - OPC UA Stack
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18355&token=e3e5a937ce72602bec39718ddc2f4ba6d983ccd1&download=
-
CVE-2024-8175: CODESYS Control V3 web server
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18604&token=d5e1e2820ee63077b875b3bb41014b1f102e88a3&download=
-
Application note: AC500 User Management with V3
https://search.abb.com/library/Download.aspx?DocumentID=3ADR010315&LanguageCode=en&DocumentPartId=&Action=Launch
-
Automation Builder 2.8.0
https://new.abb.com/plc/automationbuilder/platform/software