CVE-2023-37558
published 2023-08-03CVE-2023-37558: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent…
PriorityP433medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.52%
40.7th percentile
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37559
Affected
31 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| codesys | codesys_control_for_beaglebone_sl | < V4.10.0.0 | V4.10.0.0 |
| codesys | codesys_control_for_empc-a_imx6_sl | < V4.10.0.0 | V4.10.0.0 |
| codesys | codesys_control_for_iot2000_sl | < V4.10.0.0 | V4.10.0.0 |
| codesys | codesys_control_for_linux_sl | < V4.10.0.0 | V4.10.0.0 |
| codesys | codesys_control_for_pfc100_sl | < V4.10.0.0 | V4.10.0.0 |
| codesys | codesys_control_for_pfc200_sl | < V4.10.0.0 | V4.10.0.0 |
| codesys | codesys_control_for_plcnext_sl | < V4.10.0.0 | V4.10.0.0 |
| codesys | codesys_control_for_raspberry_pi_sl | < V4.10.0.0 | V4.10.0.0 |
| codesys | codesys_control_for_wago_touch_panels_600_sl | < V4.10.0.0 | V4.10.0.0 |
| codesys | codesys_control_rte | < V3.5.19.20 | V3.5.19.20 |
| codesys | codesys_control_rte_sl | < V3.5.19.20 | V3.5.19.20 |
| codesys | codesys_control_runtime_system_toolkit | < V3.5.19.20 | V3.5.19.20 |
| codesys | codesys_control_win | < V3.5.19.20 | V3.5.19.20 |
| codesys | codesys_development_system_v3 | < V3.5.19.20 | V3.5.19.20 |
| codesys | codesys_hmi | < V3.5.19.20 | V3.5.19.20 |
| codesys | codesys_safety_sil2_runtime_toolkit | < V3.5.19.20 | V3.5.19.20 |
| codesys | control_for_beaglebone_sl | < 4.10.0.0 | 4.10.0.0 |
| codesys | control_for_empc-a_imx6_sl | < 4.10.0.0 | 4.10.0.0 |
| codesys | control_for_iot2000_sl | < 4.10.0.0 | 4.10.0.0 |
| codesys | control_for_linux_sl | < 4.10.0.0 | 4.10.0.0 |
| codesys | control_for_pfc100_sl | < 4.10.0.0 | 4.10.0.0 |
| codesys | control_for_pfc200_sl | < 4.10.0.0 | 4.10.0.0 |
| codesys | control_for_plcnext_sl | < 4.10.0.0 | 4.10.0.0 |
| codesys | control_for_raspberry_pi_sl | < 4.10.0.0 | 4.10.0.0 |
| codesys | control_for_wago_touch_panels_600_sl | < 4.10.0.0 | 4.10.0.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
CODESYS in Festo Automation Suite
cisa_ics·2026-03-17
CODESYS in Festo Automation Suite
ICS Advisory
##
CODESYS in Festo Automation Suite
Release DateMarch 17, 2026
Alert CodeICSA-26-076-01
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## Summary
3. TECHNICAL DETAILS
The following versions of CODESYS in Festo Automation Suite are affected:
- FESTO Software Festo Automation Suite (versions prior to 2.8.0.138) installed with CODESYS Software CODESYS Development System (3.0) vers:all/*
- FESTO Software Festo Automation Suite (versions prior to 2.8.0.138) installed with CODESYS Software CODESYS Development System (3.5.16.10) vers:all/*
- FESTO Software Festo Automation Suite (2.8.0.137) installed with CODESYS Software CODESYS Development System (3.0) vers:all/*
- FESTO Software Festo Automation
CISA ICS
Schneider Electric devices using CODESYS Runtime
cisa_ics·2026-01-20·CVSS 8.8
[HIGH] Schneider Electric devices using CODESYS Runtime
ICS Advisory
##
Schneider Electric devices using CODESYS Runtime
Release DateJanuary 20, 2026
Alert CodeICSA-26-020-02
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## Summary
Schneider Electric is aware of multiple vulnerabilities disclosed on CODESYS runtime system V3 communication server. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in a denial of service or, in some cases, in remote code execution on PacDrive controllers, Modicon Controllers M241 / M251 / M262 / M258 / LMC058 / LMC078 / M218 , HMISCU, the Simulation Runtime SoftSPS from EcoStruxure Machine Expert and EcoStruxure Microgrid Operation products. Failure
CISA ICS
ABB MV Drives
cisa_ics·2025-04-22·CVSS 8.8
[HIGH] ABB MV Drives
ICS Advisory
##
ABB MV Drives
Release DateApril 22, 2025
Alert CodeICSA-25-112-04
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.7
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: ABB
- Equipment: MV Drives
- Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Improper Input Validation, Out-of-bounds Write
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to gain full access to the drive or cause a denial-of-service condition.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
ABB reports that the following MV Drives are affected by CODESYS RTS (Runtime System) vulnerabi
CISA ICS
ABB ACS880 Drives Containing CODESYS RTS
cisa_ics·2025-04-03
ABB ACS880 Drives Containing CODESYS RTS
ICS Advisory
##
ABB ACS880 Drives Containing CODESYS RTS
Release DateApril 03, 2025
Alert CodeICSA-25-093-03
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: ABB
- Equipment: ACS880 Drives with IEC 61131-3 license
- Vulnerabilities: Improper Input Validation, Out-of-bounds Write, Improper Restriction of Operations within the Bounds of a Memory Buffer
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to gain full access to the device or cause a denial-of-service condition.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
ABB reports that the following low-vol
CISA ICS
ABB Low Voltage DC Drives and Power Controllers CODESYS RTS
cisa_ics·2025-04-03·CVSS 6.5
[MEDIUM] ABB Low Voltage DC Drives and Power Controllers CODESYS RTS
ICS Advisory
##
ABB Low Voltage DC Drives and Power Controllers CODESYS RTS
Release DateApril 03, 2025
Alert CodeICSA-25-093-04
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: ABB
- Equipment: DCT880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3), DCT880 memory unit incl. Power Optimizer, DCS880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3), DCS880 memory unit incl. DEMag, DCS880 memory unit incl. DCC
- Vulnerabilities: Improper Input Validation, Out-of-bounds Write, Improper Restriction of Operations within the Bounds of a Memory Buffer
## 2. RISK EVALUATION
GHSA
GHSA-rp3r-mrhv-hcfr: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inco
ghsa_unreviewed·2023-08-03·CVSS 6.5
CVE-2023-37559 [MEDIUM] CWE-20 GHSA-rp3r-mrhv-hcfr: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inco
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37558
GHSA
GHSA-gq88-4795-g3w2: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inco
ghsa_unreviewed·2023-08-03·CVSS 6.5
CVE-2023-37558 [MEDIUM] CWE-20 GHSA-gq88-4795-g3w2: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inco
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37559
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-08-03
Published