CVE-2023-37556

MediumCVSS 6.5

Published: 03/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

40th percentile - higher than 40% of all known CVEs

Summary

In multiple versions of Codesys products, after successful user authentication, specifically crafted network communication requests with inconsistent content can cause the CmpAppBP component to read from an invalid address, potentially leading to a denial-of-service condition.

Risk Assessment

This vulnerability may lead to service outages, impacting organizational operations and customer trust.

Recommendation

It is recommended to update to the latest versions of Codesys products and monitor network communication for potential exploitation attempts.

Original NVD description (English source)

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37555.