← Back

CVE-2019-9009

nvd nist
Published: Sep 17, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.

Affected (14)

Codesys
14 products
Control For Beaglebone
Control For Empc A/imx6
Control For Iot2000
Control For Pfc100
Control For Pfc200
Control For Raspberry Pi
Control Rte
Control Win
Gateway
Hmi
Linux
Runtime System Toolkit
Safety Sil2
Simulation Runtime
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Control For Beaglebone
version < 3.5.15.0
Control For Empc A/imx6
version < 3.5.15.0
Control For Iot2000
version < 3.5.15.0
Control For Pfc100
version < 3.5.15.0
Control For Pfc200
version < 3.5.15.0
Control For Raspberry Pi
version < 3.5.15.0
Control Rte
version < 3.5.15.0
Control Win
version < 3.5.15.0
Gateway
version < 3.5.15.0
Hmi
version < 3.5.15.0
Linux
version < 3.5.15.0
Runtime System Toolkit
version < 3.5.15.0
Safety Sil2
version < 3.5.15.0
Simulation Runtime
version < 3.5.15.0

Related CWEs

CWE-755
Improper Handling of Exceptional Conditions
The product does not handle or incorrectly handles an exceptional condition.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
MitigationThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party AdvisoryUS Government Resource

Timeline

No history available yet.