CVE-2023-37556 | BDVDB-2026-208639 Detail

Description#

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37555.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-08-03Record published in the CVE List.
2. Version 22024-10-09Most recent update recorded in the CVE List.