PT-2022-8324 · Pilz+1 · Pilz Pmc+1

Published 2022-12-26 · Updated 2024-10-03 · CVE-2020-12069

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CODESYS V3 products versions prior to 3.5.16.0 Pilz PMC programming tool versions 3.x prior to 3.5.17

Description The issue is related to a weak hashing algorithm used for storing online communication passwords in the CODESYS Control runtime system. This weakness can be exploited by a local attacker with low privileges to gain full control of the device. The password-hashing feature requires insufficient computational effort, making it vulnerable to attacks.

Recommendations For CODESYS V3 products versions prior to 3.5.16.0, update to version 3.5.16.0 or later to resolve the issue. For Pilz PMC programming tool versions 3.x prior to 3.5.17, update to version 3.5.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the CmpUserMgr component to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-916

Related Identifiers

CVE-2020-12069

Affected Products

Codesys V3

Pilz Pmc

References · 10

• https://cert.vde.com/en/advisories/VDE-2022-031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12069 · Security Note
• https://cert.vde.com/en/advisories/VDE-2021-061 · Vendor Advisory
• https://cert.vde.com/en/advisories/VDE-2022-022 · Vendor Advisory
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12943&token=d097958a67ba382de688916f77e3013c0802fade&download= · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-12069 · Vendor Advisory
• https://t.me/cvenotify/40726 · Telegram Post
• https://t.me/cvenotify/50412 · Telegram Post
• https://t.me/cvenotify/96969 · Telegram Post
• https://t.me/cibsecurity/55365 · Telegram Post