VDB
BDU%3A2023-02778
BDU%3A2023-02778
PUBLISHED
CVSS 9 CRITICAL
Уязвимость программного комплекса промышленной автоматизации Codesys, связанная с раскрытием информации в ошибочной области данных, позволяющая нарушителю получить несанкционированный доступ или вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
9
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric, CODESYS GmbH | Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Runtime Toolkit, CODESYS Safety SIL2 Runtime Toolkit, CODESYS Safety SIL2 PSP, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, PacDrive 3 Controllers LMC Eco, PacDrive 3 Controllers Pro, PacDrive 3 Controllers Pro2, PacDrive Controller LMC078, Modicon M262, HMISCU, CODESYS Control for WAGO Touch Panels 600 SL |
Timeline
- May 24, 2023 CVE Published
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-01.pdf url
- https://vuldb.com/ru/?id.223665 url
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17553&token=cf49757d232ea8021f0c0dd6c65e71ea5942b12d&download= advisory