VDB

CVE-2023-37558

CVE-2023-37558 PUBLISHED CVSS 6.5 MEDIUM

After successful authentication as a user in multiple CODESYS products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition.

EPSS 0.20% · 42.0th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.20%
42.0th percentile

Affected Products

VendorProductVersions
ABBACS880 Test Bench Control Program ATBLX <= v3.44.0.0
ABBACS5000 Firmware Version >=LAAAB 4.03.0|<= LAAAB 5.06.1
ABBDCT880 memory unit incl. Power Optimizer
ABBACS880 Primary Control Program YINLX < v1.30
ABB ACS880 IGBT Supply Control Program ALHLX < v3.43
ABB ACS880 IGBT Supply Control Program AISLX < v3.43
ABBDCS880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3)
ABB ACS880 IGBT Supply Control Program YISLX < v1.30
ABBACS880 Position Control Program APCLX <= v1.04.0.5
ABBDCS880 memory unit incl. DEMag
ABB ACS880 IGBT Supply Control Program YLHLX < v1.30
ABBDCT880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3)
ABBACS6080 Firmware Version >=LAAAA 2.10.0|<=LAAAB 5.06.1
ABBDCS880 memory unit incl. DCC
ABBACS880 Primary Control Program AINLX < v3.47
ABBACS6000 Firmware Version >=LAAAA 2.10.0|<=LAAAB 5.06.1

Timeline

  • Aug 3, 2023 CVE Published
  • Aug 4, 2023 EPSS Score
  • Sep 7, 2023 EPSS Score
  • Oct 11, 2023 EPSS Score
  • Nov 13, 2023 EPSS Score
  • Dec 17, 2023 EPSS Score
  • Jan 20, 2024 EPSS Score
  • Feb 23, 2024 EPSS Score
  • Mar 28, 2024 EPSS Score
  • Apr 30, 2024 EPSS Score
  • Jun 3, 2024 EPSS Score
  • Jul 7, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›