Summary
Schneider Electric is aware of multiple vulnerabilities disclosed on CODESYS Runtime. Many
vendors, including Schneider Electric, embed CODESYS in their offers. If successfully
exploited, these vulnerabilities could result in a denial of service or, in some cases, in remote
code execution on PacDrive controllers, Modicon Controllers M241 / M251 / M262 / M258 /
LMC058 / M218 and HMISCU products.
Failure to apply the mitigations provided below may risk Logic Integrity and Permissions attacks,
which could result in loss of controllers’ integrity.
January 2024 Update: A remediation is available for CVE-2022-4224 for Harmony HMISCU
Controller, Modicon Controllers M241 / M251 / M262 and PacDrive Controllers LMC
Eco/Pro/Pro2.
Vulnerabilities 2
-
High 8.8
CODESYS: Improper memory restrictions fro CODESYS Control
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.
-
High 8.8
CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3
In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.
Revision history
-
#2.0.0
A remediation is now available for CVE-2022-4224 for Harmony HMISCU Controller HMISCU, Modicon Controllers M241 / M251 / M262 and PacDrive Controllers LMC Eco/Pro/Pro2.
-
#1.1.0
Updated acknowledgement section
-
#1.0.0
Original Release
References
-
CODESYS Runtime Vulnerabilit - SEVD-2023-101-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-01.pdf
-
Recommended Cybersecurity Best Practices
https://download.schneider-electric.com/files?p_Doc_Ref=7EN52-0390&p_enDocType=White+Paper&p_File_Name=Cybersecurity_Best+Practices_EN.pdf