PT-2020-13022 · 3S Smart Software Solutions · Codesys Webvisu+2

Published 2020-05-14 · Updated 2021-07-21 · CVE-2020-12068

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CODESYS Development System versions prior to 3.5.16.0

Description An issue was discovered that allows for privilege escalation. This issue affects CODESYS WebVisu and CODESYS Remote TargetVisu.

Recommendations For versions prior to 3.5.16.0, update to version 3.5.16.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-12068

Affected Products

Codesys Development System

Codesys Remote Targetvisu

Codesys Webvisu

References · 4

• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=13136&token=c267875c01ea70bc9613bc39c684eedc17f55420&download= · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12068 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12068 · Vendor Advisory
• https://codesys.com · Note