CVE-2023-37556

Summary

CVE-2023-37556 is a newly identified vulnerability in several versions of various Codesys products. Upon successful authentication, the system is susceptible to denial-of-service attacks when specific network communication requests with inconsistent content are received. This issue arises due to the CmpAppBP component incorrectly handling such requests, causing it to read data from an invalid memory address. This vulnerability differs from CVE-2023-37552, CVE-2023-37553, CVE-2023-37554, and CVE-2023-37555, each of which affects different components and may have distinct causes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.