CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Control_for_beaglebone_sl | Codesys | 3.0 (including) | 4.0.1.0 (excluding) |
| Control_for_empc-a/imx6_sl | Codesys | 3.0 (including) | 4.0.1.0 (excluding) |
| Control_for_iot2000_sl | Codesys | 3.0 (including) | 4.0.1.0 (excluding) |
| Control_for_linux_sl | Codesys | 3.0 (including) | 4.0.1.0 (excluding) |
| Control_for_pfc100_sl | Codesys | 3.0 (including) | 3.5.16.0 (excluding) |
| Control_for_pfc200_sl | Codesys | 3.0 (including) | 3.5.16.0 (excluding) |
| Control_for_raspberry_pi_sl | Codesys | 3.0 (including) | 4.0.1.0 (excluding) |
| Control_runtime_system_toolkit | Codesys | 3.0 (including) | 3.5.16.70 (excluding) |
| Development_system | Codesys | 3.0 (including) | 3.5.16.70 (excluding) |
| Edge_gateway | Codesys | 3.0 (including) | 3.5.16.70 (excluding) |
| Edge_gateway | Codesys | 3.0 (including) | 4.1.0.0 (excluding) |
| Gateway | Codesys | 3.0 (including) | 3.5.16.70 (excluding) |