← Back

CVE-2018-20025

nvd nist
Published: Feb 19, 2019Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.

Affected (15)

Codesys
15 products
Control For Beaglebone Sl
Control For Empc A/imx6 Sl
Control For Iot2000 Sl
Control For Linux Sl
Control For Pfc100 Sl
Control For Pfc200 Sl
Control For Raspberry Pi Sl
Control Rte Sl
Control Rte Sl (for Beckhoff Cx)
Control Runtime Toolkit
Control Win Sl
Development System
Gateway
Hmi Sl
Safety Sil2
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Control For Beaglebone Sl
From 3.0 to 3.5.14.0
Control For Empc A/imx6 Sl
From 3.0 to 3.5.14.0
Control For Iot2000 Sl
From 3.0 to 3.5.14.0
Control For Linux Sl
From 3.0 to 3.5.14.0
Control For Pfc100 Sl
From 3.0 to 3.5.14.0
Control For Pfc200 Sl
From 3.0 to 3.5.14.0
Control For Raspberry Pi Sl
From 3.0 to 3.5.14.0
Control Rte Sl
From 3.0 to 3.5.14.0
Control Rte Sl (for Beckhoff Cx)
From 3.0 to 3.5.14.0
Control Runtime Toolkit
From 3.0 to 3.5.14.0
Control Win Sl
From 3.0 to 3.5.14.0
Development System
From 3.0 to 3.5.14.0
Gateway
From 3.0 to 3.5.14.0
Hmi Sl
From 3.0 to 3.5.14.0
Safety Sil2
From 3.0 to 3.5.14.0

Related CWEs

CWE-330
Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (6)

Source: vulnerability@kaspersky.com
Third Party AdvisoryVDB Entry
Source: vulnerability@kaspersky.com
MitigationThird Party Advisory
Source: vulnerability@kaspersky.com
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.