Gateway vulnerabilities
8 known vulnerabilities in Gateway from Codesys. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Development System 3: Allocation of Resources Without Limits or Throttling
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consu
- 7.8 High severity
CODESYS Control Win (SL): Exposure of Resource to Wrong Sphere
A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.
- 7.5 High severity
CODESYS Control RTE (SL): Uncontrolled Resource Consumption
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.
- 7.5 High severity
CODESYS Control RTE (SL): Uncontrolled Resource Consumption
In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.
- 7.5 High severity
CODESYS Development System: Unprotected Transport of Credentials
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
- 7.5 High severity
CODESYS Gateway Server V2: Partial String Comparison
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding p
- 7.5 High severity
CODESYS Control RTE (SL): Use of Insufficiently Random Values
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.
- 7.1 High severity
CODESYS Control RTE (SL): Improper Restriction of Operations within the Bounds of a Memory Buffer
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor contr