← Back

CVE-2019-18858

nvd nist
Published: Nov 20, 2019Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.

Affected (14)

Codesys
14 products
Control For Beaglebone
Control For Empc A/imx6
Control For Iot2000
Control For Linux
Control For Pfc100
Control For Pfc200
Control For Plcnext
Control For Raspberry Pi
Control Rte
Control Runtime System Toolkit
Control Win
Embedded Target Visu Toolkit
Hmi
Remote Target Visu Toolkit
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Control For Beaglebone
Before 3.5.15.20
Control For Empc A/imx6
Before 3.5.15.20
Control For Iot2000
Before 3.5.15.20
Control For Linux
Before 3.5.15.20
Control For Pfc100
Before 3.5.15.20
Control For Pfc200
Before 3.5.15.20
Control For Plcnext
Before 3.5.15.20
Control For Raspberry Pi
Before 3.5.15.20
Control Rte
Before 3.5.15.20
Control Runtime System Toolkit
Before 3.5.15.20
Control Win
Before 3.5.15.20
Embedded Target Visu Toolkit
Before 3.5.15.20
Hmi
Before 3.5.15.20
Remote Target Visu Toolkit
Before 3.5.15.20

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.