Summary
This document is a security advisory detailing a vulnerability in the CODESYS Control runtime system's CmpVisuServer component, which can lead to a denial-of-service (DoS) condition. The advisory outlines the specific conditions under which the vulnerability can be exploited, particularly noting that it affects only certain versions of CODESYS Control runtime systems and PLCs utilizing the CmpVisuServer component. The document lists affected products and their respective versions, emphasizing that versions prior to 3.5.21.40 and 4.19.0.0 are impacted. It also provides remediation steps, recommending updates to the specified versions to mitigate the risk. Additionally, the advisory includes general security recommendations for users to enhance their security posture, such as using firewalls, encrypted communication, and limiting access to control systems. The document concludes with acknowledgments and a disclaimer regarding liability.
