NULL pointer dereference in CODESYS products - CVE-2019-13542

Vulnerability identifier: #VU21099

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-13542

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error when processing requests. A remote authenticated attacker can send a specially crafted request from a trusted OPC UA client and perform a denial of service (DoS) attack.

CODESYS Control RTE V3
CODESYS Control RTE V3 (for Beckhoff CX)
CODESYS Control for Raspberry Pi
CODESYS Control for PFC200
CODESYS Control for PFC100
CODESYS Control for Linux
CODESYS Control for IOT2000
CODESYS Control for emPC-A/iMX6
CODESYS Control for BeagleBone
CODESYS Control Win V3 (part of the CODESYS Development System setup)
CODESYS firmware
Amazon Linux AMI
Gentoo Linux
Opensuse

Install updates from vendor's website.

CODESYS firmware - update to 3.5.15.0

• https://ics-cert.us-cert.gov/advisories/icsa-19-255-04

• Multiple vulnerabilities in CODESYS products
• Amazon Linux AMI update for git
• OpenSUSE Linux update for git
• Gentoo update for Git
• OpenSUSE Linux update for git