CVE-2023-37558
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
After successful authentication as a user in multiple Codesys products in multiple versions, specifically crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition.
Risk Assessment
This vulnerability may lead to service outages in the organization, affecting the availability of systems based on Codesys products.
Recommendation
It is recommended to monitor and restrict access to Codesys components and to update to the latest versions to minimize the risk associated with this vulnerability.
Original NVD description (English source)
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37559