CVE-2024-6876

mediumpriority · track · 18EPSS 0.002 · 9 %ileDEEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.19% (9th) EPSS
CVSS 4.4 · medium
Is it mine?
18 products
Check your exposure
Who says so?
6 sources
cnnvd · enisa_euvd · cert_bund · cisa_csaf_ot

EPSS · scored 2026-10-28

Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedcodesys_psirt

    Update the OSCAT Basic library to version 3.3.5. The OSCAT Basic library version 3.3.5 is expected to be released in September 2024. To make the fix effective for existing CODESYS projects, you also must adjust the version of the OSCAT Basic library to be used in the Library Manager of the CODESYS project to version 3.3.5.0. Then you must update the CODESYS application on the PLC by download or online change and rebuild/download the boot application.

  • Mitigationcodesys_psirt

    CODESYS GmbH recommends an update of the OSCAT Basic library to address the security vulnerability. Without an update, the vulnerability can be prevented by validating all values in the PLC program before they are passed to the affected function. In particular, negative values must be blocked as function parameters of MONTH_TO_STRING. Regardless of whether the OSCAT Basic library in the programming system was updated or the security vulnerability in the PLC program was mitigated, a download or online change must be performed to update the application on the PLC. And don't forget to rebuild/download the boot project.

  • MitigationCODESYS OSCAT Basic Librarycisa_csaf_ot

    CODESYS GmbH recommends users update OSCAT Basic Library to address the security vulnerability:

  • Mitigationoscat.de OSCAT Basic Librarycisa_csaf_ot

    CODESYS GmbH recommends users update OSCAT Basic Library to address the security vulnerability:

02

cvss

Technical severity, 0–10. One row per scoring source.

5.1
010

base score 0–10 · higher = more severe · hover a vector to decode

v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Lprimary · NVD / NIST USexploitability 1.8 · impact 2.5
v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Lsecondary · CISA US
v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Lsecondary · ENISA EU
v3.14.4mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Lsecondary · info@cert.vde.comexploitability 1.8 · impact 2.5
v3.14.1mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:Usecondary · CVSS-BT (t0sche)
v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Lsecondary · CODESYS PSIRT
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-125USCWE-125USCWE-125US
05

affected products (18)

Products and version ranges known to be affected.

06

advisories (3)

Vendor and ecosystem advisories describing this.

  • VDE-2024-046OSCAT: Out-of-bounds read in OSCAT Basic library2024-09-10csaf · codesys_psirtDE

    The OSCAT Basic library is one of several libraries developed and provided by OSCAT. OSCAT (oscat.de) stands for "Open Source Community for Automation Technology". The OSCAT Basic library offers function blocks for various tasks, e.g. for buffer management, list processing, control technology, mathematics, string processing, time and date conversion. By adding the OSCAT Basic library into IEC 61131-3-compliant programming tools, PLC programmers can use all the functions provided by the library in their control programs. Within the library, the MONTH_TO_STRING function is affected by an out-of-bounds read vulnerability. Exploitation of the vulnerability may lead to limited access to internal data or possibly to a crash of the PLC.

  • WID-SEC-W-2024-2096CODESYS: Schwachstelle in der OSCAT Basic Bibliothek ermöglicht Denial of ServiceDeutsch2024-09-09csaf · cert_bundDE

    Ein lokaler Angreifer kann eine Schwachstelle in CODESYS in der OSCAT Basic Bibliothek ausnutzen, um einen Denial of Service Angriff durchzuführen.

  • ICSA-24-326-02OSCAT Basic Library2024-11-21icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability allows an local, unprivileged attacker to access limited internal data of the PLC, which may lead to a crash of the affected service.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcert_bundcisa_csaf_otcodesys_psirtnvdNVDCVE.orgMITRE
published 2024-09-10modified 2026-06-17
09

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan