Skip to content
OpenAdvisories
Critical ICSA-19-213-03 2 CVEs

3S-Smart Software Solutions GmbH CODESYS V3

Published Aug 1, 2019 · Updated Aug 1, 2019

Vendor: 3S-Smart Software Solutions Product: CODESYS Control for BeagleBone Product: CODESYS Control for emPC-A/iMX6 Product: CODESYS Control for IOT2000 Product: CODESYS Control for Linux Product: CODESYS Control for PFC100 Product: CODESYS Control for PFC200 Product: CODESYS Control for Raspberry Pi Product: CODESYS Control V3 Runtime System Toolkit Product: CODESYS Gateway V3 Product: CODESYS V3 Development System

Summary

Successful exploitation of these vulnerabilities could allow a remote attacker to close existing communication channels or to take over an already established user session to send crafted packets to a PLC.

Vulnerabilities 2

  • Unscored —
    CVE-2019-9010

    An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of…

  • Unscored —
    CVE-2019-9012

    An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory …

Revision history

  1. #1

    ICSA-19-213-03 3S-Smart Software Solutions GmbH CODESYS V3

References