PT-2020-14642 · 3S Smart Software Solutions · Codesys Control

Published 2020-07-22 · Updated 2021-07-21 · CVE-2020-15806

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CODESYS Control runtime system versions prior to 3.5.16.10

Description The issue allows for uncontrolled memory allocation.

Recommendations For versions prior to 3.5.16.10, update to version 3.5.16.10 or later to resolve the issue.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2020-15806

Affected Products

Codesys Control

References · 5

• 🔥 https://tenable.com/security/research/tra-2020-46 · Exploit
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=13199&token=3e283c3e73fed61f7c181a7fa1169477efaf0c58&download= · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15806 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15806 · Security Note
• https://codesys.com · Vendor Advisory