Vulnerabilities > CVE-2020-10245 - Out-of-bounds Write vulnerability in Codesys products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

critical

NVD

Published: 2020-03-26

Updated: 2024-11-21

Summary

CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.

Vulnerable Configurations

Part	Description	Count
Application	Codesys Codesys Control FOR Plcnext - Codesys Control FOR Plcnext 3.5.15.20 Codesys Control FOR Plcnext 3.5.15.30 Codesys Control FOR Beaglebone - Codesys Control FOR Beaglebone 3.0.0.0 Codesys Control FOR Beaglebone 3.5.10.0 Codesys Control FOR Beaglebone 3.5.10.20 Codesys Control FOR Beaglebone 3.5.10.30 Codesys Control FOR Beaglebone 3.5.11.0 Codesys Control FOR Beaglebone 3.5.11.10 Codesys Control FOR Beaglebone 3.5.11.20 Codesys Control FOR Beaglebone 3.5.11.50 Codesys Control FOR Beaglebone 3.5.11.60 Codesys Control FOR Beaglebone 3.5.12.0 Codesys Control FOR Beaglebone 3.5.12.10 Codesys Control FOR Beaglebone 3.5.12.30 Codesys Control FOR Beaglebone 3.5.12.70 Codesys Control FOR Beaglebone 3.5.13.0 Codesys Control FOR Beaglebone 3.5.13.20 Codesys Control FOR Beaglebone 3.5.13.30 Codesys Control FOR Beaglebone 3.5.14.0 Codesys Control FOR Beaglebone 3.5.14.10 Codesys Control FOR Beaglebone 3.5.15.0 Codesys Control FOR Beaglebone 3.5.15.20 Codesys Control FOR Beaglebone 3.5.15.30 Codesys Control FOR Empc A/Imx6 - Codesys Control FOR Empc A/Imx6 3.0.0.0 Codesys Control FOR Empc A/Imx6 3.5.10.0 Codesys Control FOR Empc A/Imx6 3.5.10.20 Codesys Control FOR Empc A/Imx6 3.5.11.0 Codesys Control FOR Empc A/Imx6 3.5.11.10 Codesys Control FOR Empc A/Imx6 3.5.11.20 Codesys Control FOR Empc A/Imx6 3.5.11.50 Codesys Control FOR Empc A/Imx6 3.5.11.60 Codesys Control FOR Empc A/Imx6 3.5.12.0 Codesys Control FOR Empc A/Imx6 3.5.12.10 Codesys Control FOR Empc A/Imx6 3.5.12.30 Codesys Control FOR Empc A/Imx6 3.5.12.70 Codesys Control FOR Empc A/Imx6 3.5.13.0 Codesys Control FOR Empc A/Imx6 3.5.13.20 Codesys Control FOR Empc A/Imx6 3.5.13.30 Codesys Control FOR Empc A/Imx6 3.5.14.0 Codesys Control FOR Empc A/Imx6 3.5.14.10 Codesys Control FOR Empc A/Imx6 3.5.15.0 Codesys Control FOR Empc A/Imx6 3.5.15.20 Codesys Control FOR Empc A/Imx6 3.5.15.30 Codesys Control FOR Iot2000 - Codesys Control FOR Iot2000 3.0.0.0 Codesys Control FOR Iot2000 3.5.11.0 Codesys Control FOR Iot2000 3.5.11.10 Codesys Control FOR Iot2000 3.5.11.20 Codesys Control FOR Iot2000 3.5.11.50 Codesys Control FOR Iot2000 3.5.11.60 Codesys Control FOR Iot2000 3.5.12.0 Codesys Control FOR Iot2000 3.5.12.10 Codesys Control FOR Iot2000 3.5.12.30 Codesys Control FOR Iot2000 3.5.12.70 Codesys Control FOR Iot2000 3.5.13.0 Codesys Control FOR Iot2000 3.5.13.20 Codesys Control FOR Iot2000 3.5.13.30 Codesys Control FOR Iot2000 3.5.14.0 Codesys Control FOR Iot2000 3.5.14.10 Codesys Control FOR Iot2000 3.5.15.0 Codesys Control FOR Iot2000 3.5.15.20 Codesys Control FOR Iot2000 3.5.15.30 Codesys Control FOR Linux - Codesys Control FOR Linux 3.5.13.0 Codesys Control FOR Linux 3.5.13.20 Codesys Control FOR Linux 3.5.13.30 Codesys Control FOR Linux 3.5.14.0 Codesys Control FOR Linux 3.5.14.10 Codesys Control FOR Linux 3.5.15.20 Codesys Control FOR Linux 3.5.15.30 Codesys Control FOR Pfc100 - Codesys Control FOR Pfc100 3.0.0.0 Codesys Control FOR Pfc100 3.5.11.0 Codesys Control FOR Pfc100 3.5.11.10 Codesys Control FOR Pfc100 3.5.11.20 Codesys Control FOR Pfc100 3.5.11.50 Codesys Control FOR Pfc100 3.5.11.60 Codesys Control FOR Pfc100 3.5.12.0 Codesys Control FOR Pfc100 3.5.12.10 Codesys Control FOR Pfc100 3.5.12.30 Codesys Control FOR Pfc100 3.5.12.40 Codesys Control FOR Pfc100 3.5.12.70 Codesys Control FOR Pfc100 3.5.13.0 Codesys Control FOR Pfc100 3.5.13.20 Codesys Control FOR Pfc100 3.5.13.30 Codesys Control FOR Pfc100 3.5.14.0 Codesys Control FOR Pfc100 3.5.14.10 Codesys Control FOR Pfc100 3.5.15.0 Codesys Control FOR Pfc100 3.5.15.20 Codesys Control FOR Pfc100 3.5.15.30 Codesys Control FOR Pfc200 - Codesys Control FOR Pfc200 3.0.0.0 Codesys Control FOR Pfc200 3.5.10.0 Codesys Control FOR Pfc200 3.5.10.20 Codesys Control FOR Pfc200 3.5.11.0 Codesys Control FOR Pfc200 3.5.11.10 Codesys Control FOR Pfc200 3.5.11.20 Codesys Control FOR Pfc200 3.5.11.50 Codesys Control FOR Pfc200 3.5.11.60 Codesys Control FOR Pfc200 3.5.12.0 Codesys Control FOR Pfc200 3.5.12.10 Codesys Control FOR Pfc200 3.5.12.30 Codesys Control FOR Pfc200 3.5.12.40 Codesys Control FOR Pfc200 3.5.12.70 Codesys Control FOR Pfc200 3.5.13.0 Codesys Control FOR Pfc200 3.5.13.10 Codesys Control FOR Pfc200 3.5.13.20 Codesys Control FOR Pfc200 3.5.13.30 Codesys Control FOR Pfc200 3.5.14.0 Codesys Control FOR Pfc200 3.5.14.10 Codesys Control FOR Pfc200 3.5.14.20 Codesys Control FOR Pfc200 3.5.14.30 Codesys Control FOR Pfc200 3.5.14.40 Codesys Control FOR Pfc200 3.5.15.0 Codesys Control FOR Pfc200 3.5.15.20 Codesys Control FOR Pfc200 3.5.15.30 Codesys Control FOR Raspberry PI - Codesys Control FOR Raspberry PI 3.0.0.0 Codesys Control FOR Raspberry PI 3.5.10.0 Codesys Control FOR Raspberry PI 3.5.10.20 Codesys Control FOR Raspberry PI 3.5.11.0 Codesys Control FOR Raspberry PI 3.5.11.10 Codesys Control FOR Raspberry PI 3.5.11.20 Codesys Control FOR Raspberry PI 3.5.11.50 Codesys Control FOR Raspberry PI 3.5.11.60 Codesys Control FOR Raspberry PI 3.5.12.0 Codesys Control FOR Raspberry PI 3.5.12.10 Codesys Control FOR Raspberry PI 3.5.12.30 Codesys Control FOR Raspberry PI 3.5.12.70 Codesys Control FOR Raspberry PI 3.5.13.0 Codesys Control FOR Raspberry PI 3.5.13.20 Codesys Control FOR Raspberry PI 3.5.13.30 Codesys Control FOR Raspberry PI 3.5.14.0 Codesys Control FOR Raspberry PI 3.5.14.10 Codesys Control FOR Raspberry PI 3.5.14.20 Codesys Control FOR Raspberry PI 3.5.14.30 Codesys Control FOR Raspberry PI 3.5.14.40 Codesys Control FOR Raspberry PI 3.5.15.0 Codesys Control FOR Raspberry PI 3.5.15.20 Codesys Control FOR Raspberry PI 3.5.15.30 Codesys Control RTE 3.5.8.60 Codesys Control RTE 3.5.9.40 Codesys Control RTE 3.5.9.50 Codesys Control RTE 3.5.9.60 Codesys Control RTE 3.5.9.70 Codesys Control RTE 3.5.10.0 Codesys Control RTE 3.5.10.10 Codesys Control RTE 3.5.10.20 Codesys Control RTE 3.5.10.40 Codesys Control RTE 3.5.10.50 Codesys Control RTE 3.5.10.60 Codesys Control RTE 3.5.10.95 Codesys Control RTE 3.5.11.0 Codesys Control RTE 3.5.11.10 Codesys Control RTE 3.5.11.20 Codesys Control RTE 3.5.11.30 Codesys Control RTE 3.5.11.40 Codesys Control RTE 3.5.11.42 Codesys Control RTE 3.5.11.50 Codesys Control RTE 3.5.11.60 Codesys Control RTE 3.5.12.0 Codesys Control RTE 3.5.12.1 Codesys Control RTE 3.5.12.10 Codesys Control RTE 3.5.12.20 Codesys Control RTE 3.5.12.30 Codesys Control RTE 3.5.12.40 Codesys Control RTE 3.5.12.50 Codesys Control RTE 3.5.12.60 Codesys Control RTE 3.5.12.70 Codesys Control RTE 3.5.12.80 Codesys Control RTE 3.5.13.0 Codesys Control RTE 3.5.13.10 Codesys Control RTE 3.5.13.20 Codesys Control RTE 3.5.13.30 Codesys Control RTE 3.5.13.40 Codesys Control RTE 3.5.14.0 Codesys Control RTE 3.5.14.10 Codesys Control RTE 3.5.14.20 Codesys Control RTE 3.5.14.30 Codesys Control RTE 3.5.14.40 Codesys Control RTE 3.5.15.0 Codesys Control RTE 3.5.15.20 Codesys Control RTE 3.5.15.30 Codesys Control Runtime System Toolkit 3.0 Codesys Control Runtime System Toolkit 3.5.12.80 Codesys Control Runtime System Toolkit 3.5.15.20 Codesys Control Runtime System Toolkit 3.5.15.30 Codesys Control WIN 3.5.9.80 Codesys Control WIN 3.5.12.30 Codesys Control WIN 3.5.12.80 Codesys Control WIN 3.5.15.30 Codesys Embedded Target Visu Toolkit 3.0 Codesys Embedded Target Visu Toolkit 3.5.12.30 Codesys Embedded Target Visu Toolkit 3.5.12.80 Codesys Embedded Target Visu Toolkit 3.5.15.20 Codesys HMI 3.5.10.0 Codesys HMI 3.5.10.10 Codesys HMI 3.5.10.20 Codesys HMI 3.5.10.30 Codesys HMI 3.5.10.30. Codesys HMI 3.5.10.40 Codesys HMI 3.5.10.50 Codesys HMI 3.5.10.60 Codesys HMI 3.5.10.70 Codesys HMI 3.5.11.0 Codesys HMI 3.5.11.10 Codesys HMI 3.5.11.20 Codesys HMI 3.5.11.30 Codesys HMI 3.5.11.40 Codesys HMI 3.5.11.50 Codesys HMI 3.5.11.60 Codesys HMI 3.5.12.0 Codesys HMI 3.5.12.10 Codesys HMI 3.5.12.20 Codesys HMI 3.5.12.30 Codesys HMI 3.5.12.40 Codesys HMI 3.5.12.50 Codesys HMI 3.5.12.70 Codesys HMI 3.5.12.80 Codesys HMI 3.5.13.0 Codesys HMI 3.5.13.10 Codesys HMI 3.5.13.20 Codesys HMI 3.5.13.30 Codesys HMI 3.5.13.40 Codesys HMI 3.5.14.0 Codesys HMI 3.5.14.10 Codesys HMI 3.5.14.20 Codesys HMI 3.5.14.30 Codesys HMI 3.5.14.40 Codesys HMI 3.5.15.0 Codesys HMI 3.5.15.20 Codesys HMI 3.5.15.30 Codesys Remote Target Visu Toolkit 3.0 Codesys Remote Target Visu Toolkit 3.5.12.30 Codesys Remote Target Visu Toolkit 3.5.12.80 Codesys Remote Target Visu Toolkit 3.5.15.20	242

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Related news

Critical CODESYS Bug Allows Remote Code Execution (source)

References

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.