CODESYS Control V3 - Externally-controlled format string in Auditlog
The CODESYS Control runtime system's CmpAuditLog component allows potentially unauthenticated remote attackers to control the format string of processed log messages. Due to the internal processing logic, the impact is limited to a crash of the CODESYS Control runtime.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-3509US | — | — | ||
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Advisory2026-03_VDE-2026-018: CODESYS Control V3 - Externally-controlled format string in Auditlog - PDFself
- Advisory2026-03_VDE-2026-018: CODESYS Control V3 - Externally-controlled format string in Auditlog - CSAFself
- Advisory2026-03_VDE-2026-018: CODESYS Control V3 - Externally-controlled format string in Auditlog - HTMLself
- CERT@VDE Security Advisories for CODESYS GmbHexternal
- CODESYS Security Advisoriesexternal
Behebungen (2)
- Mitigation
As a mitigation, the Audit Log feature can be disabled in the CODESYS Control runtime configuration file. When the Audit Log logger is not enabled, the affected functionality is no longer exposed and the vulnerability cannot be exploited. To disable the Audit Log feature, use the following settings. Depending on your existing configuration, the logger index may vary. [CmpLog] Logger.0.Name=.Audit.log Logger.0.Enable=0
- Behoben
Update the following products to version 3.5.22.0. * CODESYS Control RTE (SL) * CODESYS Control RTE (for Beckhoff CX) SL * CODESYS Control Win (SL) * CODESYS Runtime Toolkit The CODESYS Development System and the products available as CODESYS add-ons can be downloaded and installed directly with the CODESYS Installer or be downloaded from the CODESYS Store. Alternatively, as well as for all other products, you will find further information on obtaining the software update in the CODESYS Update area https://www.codesys.com/download/.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan