CVE-2023-37554

Summary

CVE-2023-37554 is a vulnerability affecting multiple versions of several Codesys products. after a successful user authentication, it allows an attacker to send specific network communication requests with inconsistent content. This manipulation causes the CmpAppBP component to read from an invalid memory address, potentially inducing a denial-of-service condition. It is distinct from CVE-2023-37552, CVE-2023-37553, CVE-2023-37555, and CVE-2023-37556.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.