Skip to content
OpenAdvisories
High ICSA-19-213-04 1 CVE

3S-Smart Software Solutions GmbH CODESYS V3 (Update A)

Published Aug 1, 2019 · Updated May 14, 2020 · Revision 2

Vendor: 3S-Smart Software Solutions Product: CODESYS Control for BeagleBone containing the CmpUserMgr component Product: CODESYS Control for emPC-A/iMX6 containing the CmpUserMgr component Product: CODESYS Control for IOT2000 containing the CmpUserMgr component Product: CODESYS Control for Linux containing the CmpUserMgr component Product: CODESYS Control for PFC100 containing the CmpUserMgr component Product: CODESYS Control for PFC200 containing the CmpUserMgr component Product: CODESYS Control for Raspberry Pi containing the CmpUserMgr component Product: CODESYS Control RTE V3 (for Beckhoff CX) containing the CmpUserMgr component Product: CODESYS Control RTE V3 containing the CmpUserMgr component Product: CODESYS Control V3 Runtime System Toolkit containing the CmpUserMgr component Product: CODESYS Control Win V3 (also part of the CODESYS Development System setup) Product: CODESYS HMI V3 containing the CmpUserMgr component Product: CODESYS V3 Simulation Runtime (part of the CODESYS Development System) containing the CmpUserMgr

Summary

Successful exploitation of this vulnerability could allow for an attacker with access to PLC traffic to obtain user credentials.

Vulnerabilities 1

  • Unscored —
    CVE-2019-9013

    An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which re…

Revision history

  1. #2

    ICSA-19-213-04 3S-Smart Software Solutions GmbH CODESYS V3 (Update A)

  2. #1

    ICSA-19-213-04 3S-Smart Software Solutions GmbH CODESYS V3

References