Description
The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CODESYS | CODESYS Gateway Server V2 | unspecified – < V2.3.9.38 | V2.3.9.38 |
Advisories 3
- FSA-202406 Several Codesys Gateway v2 vulnerabilities in Codesys provided by Festo CERT@VDE · Dec 3, 2024
- ICSA-25-182-03 FESTO CODESYS CISA ICS & IT advisories · Dec 3, 2024
- VDE-2022-040 WAGO: Multiple Vulnerabilities in Controller with WAGO I/O-Pro / CODESYS 2.3 Runtime CERT@VDE · Sep 22, 2023