CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 00:32.
Filters
1 actief1 advisories gevonden
Advisory2026-11_VDE-2026-094
CODESYS Gateway Client - Uncontrolled Memory Allocation
Gepubliceerd
30 september 2026
Laatste update
22 oktober 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
The CODESYS Gateway Client (CmpGwClient) is used by various CODESYS products to establish PLC communication via the CODESYS Gateway. Due to missing limits on memory allocations derived from a size field in a gateway response, a malicious gateway can cause excessive memory consumption in the client, resulting in a denial-of-service condition. The vulnerability can be exploited when an affected product connects to an attacker-controlled gateway.
Mitigatiesamenvatting
Update the following products to version 3.5.22.40. * CODESYS Development System 3 * CODESYS Gateway * CODESYS Edge Gateway for Windows * CODESYS HMI (SL) * CODESYS OPC DA Server SL * CODESYS PLCHandler * CODESYS Runtime Toolkit The CODESYS Development System and the products available as CODESYS add-ons can be downloaded and installed directly with the CODESYS Installer or be downloaded from the CODESYS Store. Alternatively, as well as for all other products, you will find further information on obtaining the software update in the CODESYS Update area https://www.codesys.com/download/.
Revisiegeschiedenis (2)
Initiële publicatie — 30 september 2026
Initial revision.
Update A — 22 oktober 2026
Updated remediation category - fixed SL runtimes are now available, updated summary - typo corrected, formal adaptions.