CVE-2023-37545

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37546, CVE-2023-37547, CVE-2023-37548, CVE-2023-37549, CVE-2023-37550

• codesys control for beaglebone sl (< 4.10.0.0) • codesys control for empc-a\/imx6 sl (< 4.10.0.0) • codesys control for iot2000 sl (< 4.10.0.0) • codesys control for linux sl (< 4.10.0.0) • codesys control for pfc100 sl (< 4.10.0.0) • codesys control for pfc200 sl (< 4.10.0.0) • codesys control for plcnext sl (< 4.10.0.0) • codesys control for raspberry pi sl (< 4.10.0.0) • codesys control for wago touch panels 600 sl (< 4.10.0.0) • codesys control rte sl (< 3.5.19.20) • codesys control rte sl \(for beckhoff cx\) (< 3.5.19.20) • codesys control runtime system toolkit (< 3.5.19.20) • codesys control win sl (< 3.5.19.20) • codesys development system (< 3.5.19.20) • codesys hmi (< 3.5.19.20) • codesys safety sil2 (< 3.5.19.20)