CVE-2024-6876

Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://certvde.com/en/advisories/VDE-2024-046/	Third Party Advisory
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18601&token=27389a52e058d95ff70b17a2370fedf07e073034&download=	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:codesys:oscat_basic_library:*:*:*:*:*:*:*:*

History

23 Sep 2024, 16:45

Type	Values Removed	Values Added
References	~~() https://certvde.com/en/advisories/VDE-2024-046/ -~~	() https://certvde.com/en/advisories/VDE-2024-046/ - Third Party Advisory
References	~~() https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18601&token=27389a52e058d95ff70b17a2370fedf07e073034&download= -~~	() https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18601&token=27389a52e058d95ff70b17a2370fedf07e073034&download= - Vendor Advisory
First Time		Codesys Codesys oscat Basic Library
Summary		(es) La vulnerabilidad de lectura fuera de los límites en la librería básica OSCAT permite que un atacante local sin privilegios acceda a datos internos limitados del PLC, lo que puede provocar un bloqueo del servicio afectado.
CPE		cpe:2.3:a:codesys:oscat_basic_library::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~5.1~~	v2 : unknown v3 : 4.4

10 Sep 2024, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-09-10 16:15

Updated : 2024-10-01 07:15

NVD link : CVE-2024-6876

Mitre link : CVE-2024-6876

CVE.ORG link : CVE-2024-6876

JSON object : View

Products Affected

codesys

oscat_basic_library

CWE

CWE-125

Out-of-bounds Read

4.4 /10