CODESYS: Vulnerability can cause a DoS on CODESYS OPC UA products
The CODESYS OPC UA stack of the CODESYS Control runtime system may incorrectly calculate the required buffer size for received requests/responses. This can lead to a crash of the CODESYS runtime system during the subsequent initialization of the receive buffer with zero. Update: 10.07.2024 In the Remediation section, the release date of the update has been deleted as the update is now available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-5000US | — | — | ||
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of bu… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Mitigation
Starting from version 3.5.15.0 of the affected products, the incorrect calculation of the buffer size can be avoided if the maximum supported array length of the OPC UA stack of the CODESYS Control runtime system is limited to a value of 10129639 or less. This can be achieved by adding the following setting in the CODESYS runtime configuration file (e.g. CODESYSControl.cfg): [CmpOPCUAStack] Stack.MaxArrayLenth=10129639
- Fixed
Update the following products to version 3.5.20.10: • CODESYS Control RTE (SL) • CODESYS Control RTE (for Beckhoff CX) SL • CODESYS Control Win (SL) • CODESYS Runtime Toolkit • CODESYS HMI (SL) Update the following products to version 4.12.0.0: • CODESYS Control for BeagleBone SL • CODESYS Control for emPC-A/iMX6 SL • CODESYS Control for IOT2000 SL • CODESYS Control for Linux ARM SL • CODESYS Control for Linux SL • CODESYS Control for PFC100 SL • CODESYS Control for PFC200 SL • CODESYS Control for PLCnext SL • CODESYS Control for Raspberry Pi SL • CODESYS Control for WAGO Touch Panels 600 SL The products available as CODESYS add-ons can be downloaded and installed directly with the CODESYS Installer or be downloaded from the CODESYS Store. Alternatively, as well as for all other products, you will find further information on obtaining the software update in the CODESYS download area.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan