An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation.
https://www.cisa.gov/news-events/ics-advisories/icsa-26-020-02