Vulnerabilities > CVE-2020-15806 - Memory Leak vulnerability in Codesys products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

codesys

CWE-401

NVD

Published: 2020-07-22

Updated: 2021-07-21

Summary

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.

Vulnerable Configurations

Part	Description	Count
Application	Codesys Codesys Control RTE 3.5.8.60 Codesys Control RTE 3.5.15.30 Codesys Control FOR Beaglebone - Codesys Control FOR Beaglebone 3.0.0.0 Codesys Control FOR Beaglebone 3.5.10.0 Codesys Control FOR Beaglebone 3.5.10.20 Codesys Control FOR Beaglebone 3.5.10.30 Codesys Control FOR Beaglebone 3.5.11.0 Codesys Control FOR Beaglebone 3.5.11.10 Codesys Control FOR Beaglebone 3.5.11.20 Codesys Control FOR Beaglebone 3.5.11.50 Codesys Control FOR Beaglebone 3.5.11.60 Codesys Control FOR Beaglebone 3.5.12.0 Codesys Control FOR Beaglebone 3.5.12.10 Codesys Control FOR Beaglebone 3.5.12.30 Codesys Control FOR Beaglebone 3.5.12.70 Codesys Control FOR Beaglebone 3.5.13.0 Codesys Control FOR Beaglebone 3.5.13.20 Codesys Control FOR Beaglebone 3.5.13.30 Codesys Control FOR Beaglebone 3.5.14.0 Codesys Control FOR Beaglebone 3.5.14.10 Codesys Control FOR Beaglebone 3.5.15.0 Codesys Control FOR Beaglebone 3.5.15.20 Codesys Control FOR Beaglebone 3.5.15.30 Codesys Control FOR Beaglebone 3.5.15.40 Codesys Control FOR Beaglebone 3.5.16.0 Codesys Control FOR Empc A/Imx6 - Codesys Control FOR Empc A/Imx6 3.0.0.0 Codesys Control FOR Empc A/Imx6 3.5.10.0 Codesys Control FOR Empc A/Imx6 3.5.10.20 Codesys Control FOR Empc A/Imx6 3.5.11.0 Codesys Control FOR Empc A/Imx6 3.5.11.10 Codesys Control FOR Empc A/Imx6 3.5.11.20 Codesys Control FOR Empc A/Imx6 3.5.11.50 Codesys Control FOR Empc A/Imx6 3.5.11.60 Codesys Control FOR Empc A/Imx6 3.5.12.0 Codesys Control FOR Empc A/Imx6 3.5.12.10 Codesys Control FOR Empc A/Imx6 3.5.12.30 Codesys Control FOR Empc A/Imx6 3.5.12.70 Codesys Control FOR Empc A/Imx6 3.5.13.0 Codesys Control FOR Empc A/Imx6 3.5.13.20 Codesys Control FOR Empc A/Imx6 3.5.13.30 Codesys Control FOR Empc A/Imx6 3.5.14.0 Codesys Control FOR Empc A/Imx6 3.5.14.10 Codesys Control FOR Empc A/Imx6 3.5.15.0 Codesys Control FOR Empc A/Imx6 3.5.15.20 Codesys Control FOR Empc A/Imx6 3.5.15.30 Codesys Control FOR Empc A/Imx6 3.5.15.40 Codesys Control FOR Empc A/Imx6 3.5.16.0 Codesys Control FOR Iot2000 - Codesys Control FOR Iot2000 3.0.0.0 Codesys Control FOR Iot2000 3.5.11.0 Codesys Control FOR Iot2000 3.5.11.10 Codesys Control FOR Iot2000 3.5.11.20 Codesys Control FOR Iot2000 3.5.11.50 Codesys Control FOR Iot2000 3.5.11.60 Codesys Control FOR Iot2000 3.5.12.0 Codesys Control FOR Iot2000 3.5.12.10 Codesys Control FOR Iot2000 3.5.12.30 Codesys Control FOR Iot2000 3.5.12.70 Codesys Control FOR Iot2000 3.5.13.0 Codesys Control FOR Iot2000 3.5.13.20 Codesys Control FOR Iot2000 3.5.13.30 Codesys Control FOR Iot2000 3.5.14.0 Codesys Control FOR Iot2000 3.5.14.10 Codesys Control FOR Iot2000 3.5.15.0 Codesys Control FOR Iot2000 3.5.15.20 Codesys Control FOR Iot2000 3.5.15.30 Codesys Control FOR Iot2000 3.5.15.40 Codesys Control FOR Iot2000 3.5.16.0 Codesys Control FOR Linux - Codesys Control FOR Linux 3.5.13.0 Codesys Control FOR Linux 3.5.13.20 Codesys Control FOR Linux 3.5.13.30 Codesys Control FOR Linux 3.5.14.0 Codesys Control FOR Linux 3.5.14.10 Codesys Control FOR Linux 3.5.15.20 Codesys Control FOR Linux 3.5.15.30 Codesys Control FOR Linux 3.5.15.40 Codesys Control FOR Plcnext - Codesys Control FOR Plcnext 3.5.15.20 Codesys Control FOR Plcnext 3.5.15.30 Codesys Control FOR Plcnext 3.5.15.40 Codesys Control FOR Plcnext 3.5.16.0 Codesys Control FOR Pfc100 - Codesys Control FOR Pfc100 3.0.0.0 Codesys Control FOR Pfc100 3.5.11.0 Codesys Control FOR Pfc100 3.5.11.10 Codesys Control FOR Pfc100 3.5.11.20 Codesys Control FOR Pfc100 3.5.11.50 Codesys Control FOR Pfc100 3.5.11.60 Codesys Control FOR Pfc100 3.5.12.0 Codesys Control FOR Pfc100 3.5.12.10 Codesys Control FOR Pfc100 3.5.12.30 Codesys Control FOR Pfc100 3.5.12.40 Codesys Control FOR Pfc100 3.5.12.70 Codesys Control FOR Pfc100 3.5.13.0 Codesys Control FOR Pfc100 3.5.13.20 Codesys Control FOR Pfc100 3.5.13.30 Codesys Control FOR Pfc100 3.5.14.0 Codesys Control FOR Pfc100 3.5.14.10 Codesys Control FOR Pfc100 3.5.15.0 Codesys Control FOR Pfc100 3.5.15.20 Codesys Control FOR Pfc100 3.5.15.30 Codesys Control FOR Pfc100 3.5.15.40 Codesys Control FOR Pfc100 3.5.16.0 Codesys Control FOR Pfc200 - Codesys Control FOR Pfc200 3.0.0.0 Codesys Control FOR Pfc200 3.5.10.0 Codesys Control FOR Pfc200 3.5.10.20 Codesys Control FOR Pfc200 3.5.11.0 Codesys Control FOR Pfc200 3.5.11.10 Codesys Control FOR Pfc200 3.5.11.20 Codesys Control FOR Pfc200 3.5.11.50 Codesys Control FOR Pfc200 3.5.11.60 Codesys Control FOR Pfc200 3.5.12.0 Codesys Control FOR Pfc200 3.5.12.10 Codesys Control FOR Pfc200 3.5.12.30 Codesys Control FOR Pfc200 3.5.12.40 Codesys Control FOR Pfc200 3.5.12.70 Codesys Control FOR Pfc200 3.5.13.0 Codesys Control FOR Pfc200 3.5.13.10 Codesys Control FOR Pfc200 3.5.13.20 Codesys Control FOR Pfc200 3.5.13.30 Codesys Control FOR Pfc200 3.5.14.0 Codesys Control FOR Pfc200 3.5.14.10 Codesys Control FOR Pfc200 3.5.14.20 Codesys Control FOR Pfc200 3.5.14.30 Codesys Control FOR Pfc200 3.5.14.40 Codesys Control FOR Pfc200 3.5.15.0 Codesys Control FOR Pfc200 3.5.15.20 Codesys Control FOR Pfc200 3.5.15.30 Codesys Control FOR Pfc200 3.5.15.40 Codesys Control FOR Pfc200 3.5.16.0 Codesys Control FOR Raspberry PI - Codesys Control FOR Raspberry PI 3.0.0.0 Codesys Control FOR Raspberry PI 3.5.10.0 Codesys Control FOR Raspberry PI 3.5.10.20 Codesys Control FOR Raspberry PI 3.5.11.0 Codesys Control FOR Raspberry PI 3.5.11.10 Codesys Control FOR Raspberry PI 3.5.11.20 Codesys Control FOR Raspberry PI 3.5.11.50 Codesys Control FOR Raspberry PI 3.5.11.60 Codesys Control FOR Raspberry PI 3.5.12.0 Codesys Control FOR Raspberry PI 3.5.12.10 Codesys Control FOR Raspberry PI 3.5.12.30 Codesys Control FOR Raspberry PI 3.5.12.70 Codesys Control FOR Raspberry PI 3.5.13.0 Codesys Control FOR Raspberry PI 3.5.13.20 Codesys Control FOR Raspberry PI 3.5.13.30 Codesys Control FOR Raspberry PI 3.5.14.0 Codesys Control FOR Raspberry PI 3.5.14.10 Codesys Control FOR Raspberry PI 3.5.14.20 Codesys Control FOR Raspberry PI 3.5.14.30 Codesys Control FOR Raspberry PI 3.5.14.40 Codesys Control FOR Raspberry PI 3.5.15.0 Codesys Control FOR Raspberry PI 3.5.15.20 Codesys Control FOR Raspberry PI 3.5.15.30 Codesys Control FOR Raspberry PI 3.5.15.40 Codesys Control FOR Raspberry PI 3.5.16.0 Codesys Control FOR Wago Touch Panels 600 - Codesys Control WIN 3.5.9.80 Codesys Control WIN 3.5.12.30 Codesys Control WIN 3.5.12.80 Codesys Control WIN 3.5.15.30 Codesys Control WIN 3.5.16.0 Codesys HMI 3.5.10.0 Codesys HMI 3.5.10.10 Codesys HMI 3.5.10.20 Codesys HMI 3.5.10.30 Codesys HMI 3.5.10.30. Codesys HMI 3.5.10.40 Codesys HMI 3.5.10.50 Codesys HMI 3.5.10.60 Codesys HMI 3.5.10.70 Codesys HMI 3.5.11.0 Codesys HMI 3.5.11.10 Codesys HMI 3.5.11.20 Codesys HMI 3.5.11.30 Codesys HMI 3.5.11.40 Codesys HMI 3.5.11.50 Codesys HMI 3.5.11.60 Codesys HMI 3.5.12.0 Codesys HMI 3.5.12.10 Codesys HMI 3.5.12.20 Codesys HMI 3.5.12.30 Codesys HMI 3.5.12.40 Codesys HMI 3.5.12.50 Codesys HMI 3.5.12.70 Codesys HMI 3.5.12.80 Codesys HMI 3.5.13.0 Codesys HMI 3.5.13.10 Codesys HMI 3.5.13.20 Codesys HMI 3.5.13.30 Codesys HMI 3.5.13.40 Codesys HMI 3.5.14.0 Codesys HMI 3.5.14.10 Codesys HMI 3.5.14.20 Codesys HMI 3.5.14.30 Codesys HMI 3.5.14.40 Codesys HMI 3.5.15.0 Codesys HMI 3.5.15.20 Codesys HMI 3.5.15.30 Codesys HMI 3.5.15.40 Codesys HMI 3.5.16.0 Codesys Control Runtime System Toolkit 3.0 Codesys Control Runtime System Toolkit 3.5.12.80 Codesys Control Runtime System Toolkit 3.5.15.20 Codesys Control Runtime System Toolkit 3.5.15.30 Codesys Control Runtime System Toolkit 3.5.15.40 Codesys Control Runtime System Toolkit 3.5.16.0 Codesys Simulation Runtime 3.5.9.40 Codesys Simulation Runtime 3.5.11.60 Codesys Simulation Runtime 3.5.12.0 Codesys Simulation Runtime 3.5.12.10 Codesys Simulation Runtime 3.5.12.30 Codesys Simulation Runtime 3.5.12.70 Codesys Simulation Runtime 3.5.13.0 Codesys Simulation Runtime 3.5.13.10 Codesys Simulation Runtime 3.5.13.20 Codesys Simulation Runtime 3.5.13.30 Codesys Simulation Runtime 3.5.14.0 Codesys Simulation Runtime 3.5.14.10 Codesys Simulation Runtime 3.5.14.20 Codesys Simulation Runtime 3.5.14.30 Codesys Simulation Runtime 3.5.14.40 Codesys Simulation Runtime 3.5.15.0 Codesys Simulation Runtime 3.5.15.30 Codesys Embedded Target Visu Toolkit 3.0 Codesys Embedded Target Visu Toolkit 3.5.12.30 Codesys Embedded Target Visu Toolkit 3.5.12.80 Codesys Embedded Target Visu Toolkit 3.5.15.20 Codesys Embedded Target Visu Toolkit 3.5.15.40 Codesys Remote Target Visu Toolkit 3.0 Codesys Remote Target Visu Toolkit 3.5.12.30 Codesys Remote Target Visu Toolkit 3.5.12.80 Codesys Remote Target Visu Toolkit 3.5.15.20 Codesys Remote Target Visu Toolkit 3.5.15.40	239

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References