Description
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.
Published: 2026-05-26
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability stems from improper length checking when incoming HTTP requests are parsed, which results in an out-of-bounds write that can be triggered by an unauthenticated remote attacker. This flaw allows the attacker to cause a system crash, leading to a denial of service. The CVE description only references availability impact; confidentiality or integrity are not addressed.

Affected Systems

Affected products include CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Control for BeagleBone SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux ARM SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS HMI (SL), CODESYS Runtime Toolkit, and CODESYS Virtual Control SL. Specific version information is not provided.

Risk and Exploitability

The CVSS score of 8.7 indicates a high severity disclosure. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is via remote unauthenticated HTTP requests, with the exploitable flaw being improper bounds checking during request parsing.

Generated by OpenCVE AI on May 26, 2026 at 08:50 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the vendor‑issued security patch or upgrade to an unaffected release as soon as it is available.
  • Configure network perimeter devices or host‑based firewalls to block or restrict HTTP traffic to the affected device from untrusted networks.
  • Implement logging and anomaly detection to monitor for malformed HTTP requests that could indicate an attempt to trigger the out‑of‑bounds write.

Generated by OpenCVE AI on May 26, 2026 at 08:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 27 May 2026 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Codesys control For Beaglebone Sl
Codesys control For Empc-a/imx6 Sl
Codesys control For Iot2000 Sl
Codesys control For Linux Arm Sl
Codesys control For Linux Sl
Codesys control For Pfc100 Sl
Codesys control For Pfc200 Sl
Codesys control For Plcnext Sl
Codesys control For Raspberry Pi Sl
Codesys control For Wago Touch Panels 600 Sl
Codesys control Rte (for Beckhoff Cx) Sl
Codesys control Rte Sl
Codesys control Win Sl
Codesys hmi Sl
Codesys runtime Toolkit
Codesys virtual Control Sl
Vendors & Products Codesys control For Beaglebone Sl
Codesys control For Empc-a/imx6 Sl
Codesys control For Iot2000 Sl
Codesys control For Linux Arm Sl
Codesys control For Linux Sl
Codesys control For Pfc100 Sl
Codesys control For Pfc200 Sl
Codesys control For Plcnext Sl
Codesys control For Raspberry Pi Sl
Codesys control For Wago Touch Panels 600 Sl
Codesys control Rte (for Beckhoff Cx) Sl
Codesys control Rte Sl
Codesys control Win Sl
Codesys hmi Sl
Codesys runtime Toolkit
Codesys virtual Control Sl

Tue, 26 May 2026 11:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 26 May 2026 07:45:00 +0000

Type Values Removed Values Added
Description The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.
Title Out-of-bounds Write in CODESYS Control
First Time appeared Codesys
Codesys codesys Control For Beaglebone Sl
Codesys codesys Control For Empc A Imx6 Sl
Codesys codesys Control For Iot2000 Sl
Codesys codesys Control For Linux Arm Sl
Codesys codesys Control For Linux Sl
Codesys codesys Control For Pfc100 Sl
Codesys codesys Control For Pfc200 Sl
Codesys codesys Control For Plcnext Sl
Codesys codesys Control For Raspberry Pi Sl
Codesys codesys Control For Wago Touch Panels 600 Sl
Codesys codesys Control Rte For Beckhoff Cx Sl
Codesys codesys Control Rte Sl
Codesys codesys Control Win Sl
Codesys codesys Hmi Sl
Codesys codesys Runtime Toolkit
Codesys codesys Virtual Control Sl
Weaknesses CWE-1284
CPEs cpe:2.3:a:codesys:codesys_control_for_beaglebone_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_for_empc_a_imx6_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_for_iot2000_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_for_linux_arm_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_for_linux_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_for_pfc100_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_for_pfc200_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_for_plcnext_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_rte_for_beckhoff_cx_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_rte_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_control_win_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_hmi_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_runtime_toolkit:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:codesys_virtual_control_sl:*:*:*:*:*:*:*:*
Vendors & Products Codesys
Codesys codesys Control For Beaglebone Sl
Codesys codesys Control For Empc A Imx6 Sl
Codesys codesys Control For Iot2000 Sl
Codesys codesys Control For Linux Arm Sl
Codesys codesys Control For Linux Sl
Codesys codesys Control For Pfc100 Sl
Codesys codesys Control For Pfc200 Sl
Codesys codesys Control For Plcnext Sl
Codesys codesys Control For Raspberry Pi Sl
Codesys codesys Control For Wago Touch Panels 600 Sl
Codesys codesys Control Rte For Beckhoff Cx Sl
Codesys codesys Control Rte Sl
Codesys codesys Control Win Sl
Codesys codesys Hmi Sl
Codesys codesys Runtime Toolkit
Codesys codesys Virtual Control Sl
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Codesys Codesys Control For Beaglebone Sl Codesys Control For Empc A Imx6 Sl Codesys Control For Iot2000 Sl Codesys Control For Linux Arm Sl Codesys Control For Linux Sl Codesys Control For Pfc100 Sl Codesys Control For Pfc200 Sl Codesys Control For Plcnext Sl Codesys Control For Raspberry Pi Sl Codesys Control For Wago Touch Panels 600 Sl Codesys Control Rte For Beckhoff Cx Sl Codesys Control Rte Sl Codesys Control Win Sl Codesys Hmi Sl Codesys Runtime Toolkit Codesys Virtual Control Sl Control For Beaglebone Sl Control For Empc-a/imx6 Sl Control For Iot2000 Sl Control For Linux Arm Sl Control For Linux Sl Control For Pfc100 Sl Control For Pfc200 Sl Control For Plcnext Sl Control For Raspberry Pi Sl Control For Wago Touch Panels 600 Sl Control Rte (for Beckhoff Cx) Sl Control Rte Sl Control Win Sl Hmi Sl Runtime Toolkit Virtual Control Sl
cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2026-05-26T10:48:24.087Z

Reserved: 2026-05-06T17:12:05.142Z

Link: CVE-2026-8047

cve-icon Vulnrichment

Updated: 2026-05-26T10:48:19.543Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-26T08:16:22.447

Modified: 2026-05-26T20:00:24.897

Link: CVE-2026-8047

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-27T10:05:24Z

Weaknesses
  • CWE-1284

    Improper Validation of Specified Quantity in Input