Description
Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| oscat.de | OSCAT Basic Library | < 3.3.5, < 335 | 3.3.5 |
| CODESYS | OSCAT Basic Library | 0.0.0 – < <3.3.5.0 | <3.3.5.0 |
Advisories 3
- ICSA-24-326-02 OSCAT Basic Library CISA ICS & IT advisories · Nov 21, 2024
- VDE-2024-046 OSCAT: Out-of-bounds read in OSCAT Basic library CERT@VDE · Sep 10, 2024
- WID-SEC-2024-2096 CODESYS: Schwachstelle in der OSCAT Basic Bibliothek ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 9, 2024