CVE-2018-20026
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.
Affected (18)
Products: Codesys: Control For Beaglebone Sl, Control For Empc A/imx6 Sl, Control For Iot2000 Sl, Control For Linux Sl, Control For Pfc100 Sl, Control For Pfc200 Sl, Control For Raspberry Pi Sl, Control Rte Sl, Control Rte Sl (for Beckhoff Cx), Control Runtime Toolkit, Control Win Sl, Development System V3, Gateway, Hmi Sl, Opc Server, Plchandler, Safety Sil2, Targetvisu Sl
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 | |
| From 3.0 to 3.5.14.0 |
References (6)
Source: vulnerability@kaspersky.com
Broken LinkThird Party AdvisoryVDB Entry
Source: vulnerability@kaspersky.com
MitigationThird Party Advisory
Source: vulnerability@kaspersky.com
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Timeline
No history available yet.