Codesys Ethernetip
Monthly
Denial of service in the CODESYS EtherNet/IP adapter stack (versions 1.0.0.0 up to but not including 4.9.0.0) lets an unauthenticated remote attacker exhaust all available TCP connections, blocking legitimate EtherNet/IP clients from establishing new sessions. The flaw is remotely reachable with no authentication or user interaction (CVSS 4.0 8.7, VA:H). No public exploit has been identified at time of analysis and EPSS is low (0.14%), but CISA SSVC rates it automatable with partial technical impact.
Denial of service in the CODESYS EtherNet/IP adapter stack (versions 1.0.0.0 up to but not including 4.9.0.0) lets an unauthenticated remote attacker exhaust all available TCP connections, blocking legitimate EtherNet/IP clients from establishing new sessions. The flaw is remotely reachable with no authentication or user interaction (CVSS 4.0 8.7, VA:H). No public exploit has been identified at time of analysis and EPSS is low (0.14%), but CISA SSVC rates it automatable with partial technical impact.