CVE-2024-5000— CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-5000
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
Source: NVD (National Vulnerability Database)
Vulnerability Description
An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
缓冲区大小计算不正确
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款CODESYS产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CODESYS Control是德国CODESYS公司的一套工业控制程序编程软件。 多款CODESYS产品存在安全漏洞，该漏洞源于未经身份验证的远程攻击者可以使用恶意 OPC UA 客户端向受影响的 CODESYS 产品发送精心设计的请求，可能会因缓冲区大小计算不正确而导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| CODESYS | CODESYS Control for BeagleBone SL | 0 ~ 4.12.0.0 | - | |
| CODESYS | CODESYS Control for emPC-A/iMX6 SL | 0 ~ 4.12.0.0 | - | |
| CODESYS | CODESYS Control for IOT2000 SL | 0 ~ 4.12.0.0 | - | |
| CODESYS | CODESYS Control for Linux ARM SL | 0 ~ 4.12.0.0 | - | |
| CODESYS | CODESYS Control for Linux SL | 0 ~ 4.12.0.0 | - | |
| CODESYS | CODESYS Control for PFC100 SL | 0 ~ 4.12.0.0 | - | |
| CODESYS | CODESYS Control for PFC200 SL | 0 ~ 4.12.0.0 | - | |
| CODESYS | CODESYS Control for PLCnext SL | 0 ~ 4.12.0.0 | - | |
| CODESYS | CODESYS Control for Raspberry Pi SL | 0 ~ 4.12.0.0 | - | |
| CODESYS | CODESYS Control for WAGO Touch Panels 600 SL | 0 ~ 4.12.0.0 | - | |
| CODESYS | CODESYS Control RTE (for Beckhoff CX) SL | 0 ~ 3.5.20.10 | - | |
| CODESYS | CODESYS Control RTE (SL) | 0 ~ 3.5.20.10 | - | |
| CODESYS | CODESYS Runtime Toolkit | 0 ~ 3.5.20.10 | - | |
| CODESYS | CODESYS Control Win (SL) | 0 ~ 3.5.20.10 | - | |
| CODESYS | CODESYS HMI (SL) | 0 ~ 3.5.20.10 | - |
II. Public POCs for CVE-2024-5000
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-5000
请登录查看更多情报信息。
Other References for CVE-2024-5000 (2)
IV. Related Vulnerabilities
Same product: CODESYS Control for BeagleBone SL
- CVE-2025-0694
CODESYS Control V3 removable media path traversal - CVE-2024-8175
CODESYS: web server vulnerable to DoS - CVE-2023-6357
OS Command Injection in multiple CODESYS products - CVE-2022-4046
CODESYS: Improper memory restrictions fro CODESYS Control - CVE-2023-37559
CODESYS Improper Validation of Consistency within Input in m
Same vendor: CODESYS
- CVE-2026-8047
Out-of-bounds Write in CODESYS Control - CVE-2026-8046
Incorrect Authorization in CODESYS Control - CVE-2026-44469
Incorrect Default Permissions in CODESYS Development System - CVE-2026-44468
Incorrect Default Permissions in CODESYS Development System - CVE-2026-0393
CODESYS Visualization - Insufficiently Protected Credentials
Same weakness: CWE-131
- CVE-2026-46521
ImageMagick: Heap Buffer Over-Write in MIFF encoder when usi - CVE-2026-11604
OpenVPN ovpn-dco-win 安全漏洞 - CVE-2026-42915
Microsoft Windows VMSwitch Denial of Service Vulnerability - CVE-2026-40618
BIG-IP SSL/TLS vulnerability - CVE-2026-44223
vLLM: extract_hidden_states speculative decoding crashes ser
V. Comments for CVE-2024-5000
No comments yet