CVE-2024-8175

EUVD-2024-48999
An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
codesysruntime_toolkit
𝑥
< 4.14.0.0
ADP
codesyscontrol_rte_\(for_beckhoff_cx\)_sl
𝑥
< 3.5.20.30
ADP
codesysvirtual_control_sl
𝑥
< 4.14.0.0
ADP
codesysruntime_toolkit
𝑥
< 3.5.20.30
ADP
Common Weakness Enumeration
References
https://cert.vde.com/en/advisories/VDE-2024-057
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18604&token=d5e1e2820ee63077b875b3bb41014b1f102e88a3&download=