Skip to content
OpenAdvisories
Critical ICSA-19-255-01 2 CVEs

3S-Smart Software Solutions GmbH CODESYS V3 Web Server

Published Sep 12, 2019 · Updated Sep 12, 2019

Vendor: 3S-Smart Software Solutions Product: CODESYS Control for BeagleBone containing the webserver CmpWebServer Product: CODESYS Control for emPC-A/iMX6 containing the webserver CmpWebServer Product: CODESYS Control for IOT2000 containing the webserver CmpWebServer Product: CODESYS Control for Linux containing the webserver CmpWebServer Product: CODESYS Control for PFC100 containing the webserver CmpWebServer Product: CODESYS Control for PFC200 containing the webserver CmpWebServer Product: CODESYS Control for Raspberry Pi containing the webserver CmpWebServer Product: CODESYS Control RTE V3 (for Beckhoff CX) containing the webserver CmpWebServer Product: CODESYS Control RTE V3 containing the webserver CmpWebServer Product: CODESYS Control V3 Runtime System Toolkit containing the webserver CmpWebServer Product: CODESYS Control Win V3 (also part of the CODESYS Development System setup) Product: CODESYS HMI V3 containing the webserver CmpWebServer Product: CODESYS V3 Embedded Target Visu Toolkit containing the webserver CmpWebServer Product: CODESYS V3 Remote Target Visu Toolkit containing the webserver CmpWebServer

Summary

Successful exploitation of these vulnerabilities may allow an attacker to create a denial-of-service condition, to perform remote code execution, or to access restricted files.

Vulnerabilities 2

  • Unscored —
    CVE-2019-13532

    CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requ…

  • Unscored —
    CVE-2019-13548

    CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requ…

Revision history

  1. #1

    ICSA-19-255-01 3S-Smart Software Solutions GmbH CODESYS V3 web server

References