CVE-2023-37557
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
After successful authentication as a user in multiple Codesys products in multiple versions, specifically crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition.
Risk Assessment
The organization may experience service outages, which can impact operations and customer trust.
Recommendation
It is recommended to monitor and restrict access to the CmpAppBP component and update Codesys products to the latest versions to minimize risk.
Original NVD description (English source)
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition.