PT-2019-6349 · 3S Smart · Codesys Control V3 Runtime System Toolkit+12

Junyoung Park · Published 2019-07-22 · Updated 2023-08-14 · CVE-2019-9013

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 3S-Smart CODESYS V3 products versions containing the CmpUserMgr component CODESYS Control for BeagleBone versions containing the CmpUserMgr component CODESYS Control for emPC-A/iMX6 versions containing the CmpUserMgr component CODESYS Control for IOT2000 versions containing the CmpUserMgr component CODESYS Control for Linux versions containing the CmpUserMgr component CODESYS Control for PFC100 versions containing the CmpUserMgr component CODESYS Control for PFC200 versions containing the CmpUserMgr component CODESYS Control for Raspberry Pi versions containing the CmpUserMgr component CODESYS Control RTE V3 versions containing the CmpUserMgr component CODESYS Control RTE V3 (for Beckhoff CX) versions containing the CmpUserMgr component CODESYS Control Win V3 versions containing the CmpUserMgr component CODESYS V3 Simulation Runtime versions containing the CmpUserMgr component CODESYS Control V3 Runtime System Toolkit versions containing the CmpUserMgr component CODESYS HMI V3 versions containing the CmpUserMgr component

Description The issue is related to the use of non-TLS based encryption in the CmpUserMgr component of CODESYS V3 products, which results in user credentials being insufficiently protected during transport. This could allow a remote attacker to gain unauthorized access to protected information. Authentication is needed for exploitation, but there are cases where this requirement could be bypassed.

Recommendations For all versions of 3S-Smart CODESYS V3 products containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control for BeagleBone containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control for emPC-A/iMX6 containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control for IOT2000 containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control for Linux containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control for PFC100 containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control for PFC200 containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control for Raspberry Pi containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control RTE V3 containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control RTE V3 (for Beckhoff CX) containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control Win V3 containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS V3 Simulation Runtime containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS Control V3 Runtime System Toolkit containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. For all versions of CODESYS HMI V3 containing the CmpUserMgr component, consider disabling the CmpUserMgr component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

BDU:2023-02926

CVE-2019-9013

Affected Products

3S-Smart Codesys V3

Codesys Control Rte V3

Codesys Control V3 Runtime System Toolkit

Codesys Control Win V3

Codesys Control For Beaglebone

Codesys Control For Iot2000

Codesys Control For Linux

Codesys Control For Pfc100

Codesys Control For Pfc200

Codesys Control For Raspberry Pi

Codesys Control For Empc-A/Imx6

Codesys Hmi V3

Codesys V3 Simulation Runtime

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2019-9013 · Security Note
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12943&token=d097958a67ba382de688916f77e3013c0802fade&download= · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-9013 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02926 · Security Note
• https://us-cert.gov/ics/advisories/icsa-19-213-04 · Note
• https://twitter.com/InveringTech/status/1691173115831939072 · Twitter Post
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12943&token=d097958a67ba382de688916f77e3013c0802fade&download= · Note
• https://t.me/echeloneyes/1840 · Telegram Post