PT-2020-19360 · 3S Smart Software Solutions · Codesys Control V3+2

Published 2020-01-24 · Updated 2021-07-21 · CVE-2020-7052

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CODESYS Control V3 versions prior to 3.5.15.30 CODESYS Gateway V3 versions prior to 3.5.15.30 CODESYS HMI V3 versions prior to 3.5.15.30

Description The issue allows for uncontrolled memory allocation, which can result in a remote denial of service condition.

Recommendations For CODESYS Control V3 versions prior to 3.5.15.30, update to version 3.5.15.30 or later. For CODESYS Gateway V3 versions prior to 3.5.15.30, update to version 3.5.15.30 or later. For CODESYS HMI V3 versions prior to 3.5.15.30, update to version 3.5.15.30 or later.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2020-7052

Affected Products

Codesys Control V3

Codesys Gateway V3

Codesys Hmi V3

References · 4

• 🔥 https://tenable.com/security/research/tra-2020-04 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-7052 · Security Note
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12977&token=33f948eed0c2fd69d238d9515779be337ef7592d&download= · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7052 · Vendor Advisory