CVE-2024-5000: Codesys Control For Beaglebone Sl

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size.

Affected products

  • Codesys Codesys Control For Beaglebone Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Codesys Control For Empc-a/imx6 Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Codesys Control For IOT2000 Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Codesys Control For Linux Arm Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Codesys Control For Linux Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Codesys Control For PFC100 Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Codesys Control For PFC200 Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Codesys Control For Plcnext Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Codesys Control For Raspberry Pi Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Codesys Control For Wago Touch Panels 600 Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Codesys Control Rte For Beckhoff Cx Sl: before 3.5.20.10 (fixed in 3.5.20.10)
  • Codesys Codesys Control Rte Sl: before 3.5.20.10 (fixed in 3.5.20.10)
  • Codesys Codesys Control Win Sl: before 3.5.20.10 (fixed in 3.5.20.10)
  • Codesys Codesys HMI Sl: before 3.5.20.10 (fixed in 3.5.20.10)
  • Codesys Codesys Runtime Toolkit: before 3.5.20.10 (fixed in 3.5.20.10)
  • Codesys Control For Beaglebone Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Control For Empc-a\/imx6 Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Control For IOT2000 Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Control For Linux Arm Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Control For Linux Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Control For PFC200 Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Control For Plcnext Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Control For Raspberry Pi Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Control For Wago Touch Panels 600 Sl: before 4.12.0.0 (fixed in 4.12.0.0)
  • Codesys Control Rte \for Beckhoff Cx\ Sl: before 3.5.20.10 (fixed in 3.5.20.10)
  • and 4 more

Published 2024-06-04. Last modified 2026-06-17.