CyberRota Analysis
AI-GeneratedThe CODESYS Gateway Client is vulnerable due to improper memory allocation based on an unchecked size field in gateway responses, allowing unauthenticated remote attackers to exploit this flaw. This can lead to excessive memory consumption and a denial-of-service condition, resulting in a complete loss of availability for affected systems. Organizations using CODESYS should prioritize addressing this vulnerability to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.