CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Control_for_beaglebone_sl | Codesys | 3.0 (including) | 4.0.1.0 (excluding) |
| Control_for_empc-a/imx6_sl | Codesys | 3.0 (including) | 4.0.1.0 (excluding) |
| Control_for_iot2000_sl | Codesys | 3.0 (including) | 4.0.1.0 (excluding) |
| Control_for_linux_sl | Codesys | 3.0 (including) | 4.0.1.0 (excluding) |
| Control_for_pfc100_sl | Codesys | 3.0 (including) | 3.5.16.0 (excluding) |
| Control_for_pfc200_sl | Codesys | 3.0 (including) | 3.5.16.0 (excluding) |
| Control_for_raspberry_pi_sl | Codesys | 3.0 (including) | 4.0.1.0 (excluding) |
| Control_runtime_system_toolkit | Codesys | 3.0 (including) | 3.5.16.70 (excluding) |
| Development_system | Codesys | 3.0 (including) | 3.5.16.70 (excluding) |
| Edge_gateway | Codesys | 3.0 (including) | 3.5.16.70 (excluding) |
| Edge_gateway | Codesys | 3.0 (including) | 4.1.0.0 (excluding) |
| Gateway | Codesys | 3.0 (including) | 3.5.16.70 (excluding) |
Potential Mitigations
References
- https://customers.codesys.com/index.php
- https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=14637\u0026token=8dbd75ae7553ae3be25e22f741db783b31e14799\u0026download=
- https://www.codesys.com/security/security-reports.html
- https://customers.codesys.com/index.php
- https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=14637\u0026token=8dbd75ae7553ae3be25e22f741db783b31e14799\u0026download=
- https://www.codesys.com/security/security-reports.html