{"id":"CVE-2026-76992","published":"2026-09-30T11:16:47.283","lastModified":"2026-09-30T19:57:08.043","description":"The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-770"],"vendors":[],"products":[],"references":[{"url":"https://www.certvde.com/en/advisories/VDE-2026-094/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The CODESYS Gateway Client suffers from excessive memory allocation due to missing size limits on gateway responses, allowing unauthenticated attackers to cause denial-of-service through memory exhaustion.","exploitability":"Exploitation requires an attacker to control a malicious gateway that can send crafted responses with oversized size fields, making it moderately difficult but possible in environments where such gateways are trusted.","blast_radius":"In industrial control systems using CODESYS Gateway Client, this vulnerability could lead to complete system unavailability, affecting critical infrastructure operations and potentially causing production halts or safety issues.","remediation":"Disable the affected gateway client functionality until a patched version is available, as no fixed version is specified in the description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ics","dos","memory"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:12:26.928Z"}}