CVE-2024-8175: Codesys Control For Beaglebone Sl

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.

Affected products

Codesys Codesys Control For Beaglebone Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Codesys Control For Empc-a/imx6 Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Codesys Control For IOT2000 Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Codesys Control For Linux Arm Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Codesys Control For Linux Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Codesys Control For PFC100 Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Codesys Control For PFC200 Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Codesys Control For Plcnext Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Codesys Control For Raspberry Pi Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Codesys Control For Wago Touch Panels 600 Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Codesys Control Rte For Beckhoff Cx Sl: before 3.5.20.30 (fixed in 3.5.20.30)
Codesys Codesys Control Rte Sl: before 3.5.20.30 (fixed in 3.5.20.30)
Codesys Codesys Control Win Sl: before 3.5.20.30 (fixed in 3.5.20.30)
Codesys Codesys Embedded Target Visu Toolkit: before 3.5.20.30 (fixed in 3.5.20.30)
Codesys Codesys HMI Sl: before 3.5.20.30 (fixed in 3.5.20.30)
Codesys Codesys Remote Target Visu Toolkit: before 3.5.20.30 (fixed in 3.5.20.30)
Codesys Codesys Runtime Toolkit: before 3.5.20.30 (fixed in 3.5.20.30)
Codesys Codesys Virtual Control Sl: before 4.14.0.0 (fixed in 4.14.0.0)
Codesys Control Rte \for Beckhoff Cx\ Sl: before 3.5.20.30 (fixed in 3.5.20.30)
Codesys Runtime Toolkit: before 4.14.0.0 (fixed in 4.14.0.0); before 3.5.20.30 (fixed in 3.5.20.30)
Codesys Virtual Control Sl: before 4.14.0.0 (fixed in 4.14.0.0)

Published 2024-09-25. Last modified 2026-06-17.