The vulnerability in CODESYS Control RTE (SL) involves improper synchronization when multiple clients send concurrent monitoring requests. This race condition (CWE-362) can lead to incorrect reads or writes or corruption of internal memory structures. An authenticated attacker with monitoring access can exploit this flaw to disrupt data integrity or cause denial-of-service conditions. The affected versions are from 3.0.0.0 up to but not including 3.5.22.40 and from 3.5.0.0 up to but not including 4.23.0.0. No explicit patch or remediation details are provided in the input data.

Exploitation allows an authenticated remote attacker with monitoring access to cause incorrect data processing or denial-of-service by triggering race conditions in the monitoring functionality. This can affect the reliability and availability of the affected CODESYS Control RTE (SL) systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict monitoring access to trusted users only and avoid concurrent monitoring requests from multiple clients to reduce the risk of exploitation.