What’s Vulnerable › Vulnerabilities
CVE-2024-5000: CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-06-04 · updated 2026-06-17
- Weakness: CWE-131
Description
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.
Affected products
- CODESYS Control for BeagleBone SL: before 4.12.0.0 — fixed in 4.12.0.0
- CODESYS Control For Empc-A/Imx6 Sl: before 4.12.0.0 — fixed in 4.12.0.0
- CODESYS Control for IOT2000 SL: before 4.12.0.0 — fixed in 4.12.0.0
- CODESYS Control for Linux ARM SL: before 4.12.0.0 — fixed in 4.12.0.0
- CODESYS Control for Linux SL: before 4.12.0.0 — fixed in 4.12.0.0
- CODESYS Control for PFC200 SL: before 4.12.0.0 — fixed in 4.12.0.0
- CODESYS Control for PLCnext SL: before 4.12.0.0 — fixed in 4.12.0.0
- CODESYS Control for Raspberry Pi SL: before 4.12.0.0 — fixed in 4.12.0.0
- CODESYS Control for WAGO Touch Panels 600 SL: before 4.12.0.0 — fixed in 4.12.0.0
- CODESYS Control Rte (For Beckhoff Cx) Sl: before 3.5.20.10 — fixed in 3.5.20.10
- CODESYS Control Rte (Sl): before 3.5.20.10 — fixed in 3.5.20.10
- CODESYS Control Win (Sl): before 3.5.20.10 — fixed in 3.5.20.10
- CODESYS Hmi (Sl): before 3.5.20.10 — fixed in 3.5.20.10
- CODESYS Runtime Toolkit: before 3.5.20.10 — fixed in 3.5.20.10
How to fix
Upgrade to a fixed version: CODESYS Control for BeagleBone SL 4.12.0.0; CODESYS Control For Empc-A/Imx6 Sl 4.12.0.0; CODESYS Control for IOT2000 SL 4.12.0.0; CODESYS Control for Linux ARM SL 4.12.0.0; CODESYS Control for Linux SL 4.12.0.0; CODESYS Control for PFC200 SL 4.12.0.0; CODESYS Control for PLCnext SL 4.12.0.0; CODESYS Control for Raspberry Pi SL 4.12.0.0; CODESYS Control for WAGO Touch Panels 600 SL 4.12.0.0; CODESYS Control Rte (For Beckhoff Cx) Sl 3.5.20.10; CODESYS Control Rte (Sl) 3.5.20.10; CODESYS Control Win (Sl) 3.5.20.10. Check the vendor advisory for mitigations.
References
- https://cert.vde.com/en/advisories/VDE-2024-026
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18355&token=e3e5a937ce72602bec39718ddc2f4ba6d983ccd1&download=
- https://cert.vde.com/en/advisories/VDE-2024-026
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18355&token=e3e5a937ce72602bec39718ddc2f4ba6d983ccd1&download=
Get alerted when CVE-2024-5000 or the next vulnerability affects your stack