VDB

CVE-2023-37559

CVE-2023-37559 PUBLISHED CVSS 6.5 MEDIUM

After successful authentication as a user in multiple CODESYS products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition.

EPSS 0.20% · 42.0th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.20%
42.0th percentile

Affected Products

VendorProductVersions
ABBACS6000 Firmware Version >=LAAAA 2.10.0|<=LAAAB 5.06.1
ABBDCS880 memory unit incl. DCC
ABB ACS880 IGBT Supply Control Program YLHLX < v1.30
ABBACS880 Test Bench Control Program ATBLX <= v3.44.0.0
ABBACS880 Primary Control Program AINLX < v3.47
ABBACS5000 Firmware Version >=LAAAB 4.03.0|<= LAAAB 5.06.1
ABB ACS880 IGBT Supply Control Program ALHLX < v3.43
ABBDCS880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3)
ABB ACS880 IGBT Supply Control Program YISLX < v1.30
ABB ACS880 IGBT Supply Control Program AISLX < v3.43
ABBDCS880 memory unit incl. DEMag
ABBDCT880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3)
ABBDCT880 memory unit incl. Power Optimizer
ABBACS880 Position Control Program APCLX <= v1.04.0.5
ABBACS6080 Firmware Version >=LAAAA 2.10.0|<=LAAAB 5.06.1
ABBACS880 Primary Control Program YINLX < v1.30

Timeline

  • Aug 3, 2023 CVE Published
  • Aug 4, 2023 EPSS Score
  • Sep 7, 2023 EPSS Score
  • Oct 11, 2023 EPSS Score
  • Nov 13, 2023 EPSS Score
  • Dec 17, 2023 EPSS Score
  • Jan 20, 2024 EPSS Score
  • Feb 23, 2024 EPSS Score
  • Mar 28, 2024 EPSS Score
  • Apr 30, 2024 EPSS Score
  • Jun 3, 2024 EPSS Score
  • Jul 7, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›