CVE-2019-19789

Published: Dec 20, 2019Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.

Affected (3)

Products: Codesys: Plcwinnt, Runtime Toolkit, Sp Realtime Nt

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Codesys Plcwinnt	Before 2.4.7.54
Codesys Runtime Toolkit	Before 2.4.7.54
Codesys Sp Realtime Nt	Before 2.3.7.28

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (4)

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12946&token=edd5d8e821edaf3189d36bb1cac1aa1bfc42351f&download=

Source: cve@mitre.org

Vendor Advisory

https://www.codesys.com

Source: cve@mitre.org

Vendor Advisory

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12946&token=edd5d8e821edaf3189d36bb1cac1aa1bfc42351f&download=

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.codesys.com

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.