An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.
Weakness
The product does not handle or incorrectly handles an exceptional condition.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Control_for_beaglebone | Codesys | * | 3.5.15.0 (excluding) |
| Control_for_empc-a/imx6 | Codesys | * | 3.5.15.0 (excluding) |
| Control_for_iot2000 | Codesys | * | 3.5.15.0 (excluding) |
| Control_for_pfc100 | Codesys | * | 3.5.15.0 (excluding) |
| Control_for_pfc200 | Codesys | * | 3.5.15.0 (excluding) |
| Control_for_raspberry_pi | Codesys | * | 3.5.15.0 (excluding) |
| Control_rte | Codesys | * | 3.5.15.0 (excluding) |
| Control_win | Codesys | * | 3.5.15.0 (excluding) |
| Gateway | Codesys | * | 3.5.15.0 (excluding) |
| Hmi | Codesys | * | 3.5.15.0 (excluding) |
| Linux | Codesys | * | 3.5.15.0 (excluding) |
| Runtime_system_toolkit | Codesys | * | 3.5.15.0 (excluding) |
| Safety_sil2 | Codesys | * | 3.5.15.0 (excluding) |
| Simulation_runtime | Codesys | * | 3.5.15.0 (excluding) |
References
- https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=12941\u0026token=50fabe3870c7bdc41701eb1799dddeec103de40c\u0026download=
- https://www.us-cert.gov/ics/advisories/icsa-19-255-05
- https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=12941\u0026token=50fabe3870c7bdc41701eb1799dddeec103de40c\u0026download=
- https://www.us-cert.gov/ics/advisories/icsa-19-255-05