← Back

CVE-2020-10245

nvd nist
Published: Mar 26, 2020Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.

Affected (15)

Codesys
14 products
Control For Beaglebone
Control For Empc A/imx6
Control For Iot2000
Control For Linux
Control For Pfc100
Control For Pfc200
Control For Plcnext
Control For Raspberry Pi
Control Rte
Control Runtime System Toolkit
Control Win
Embedded Target Visu Toolkit
Hmi
Remote Target Visu Toolkit
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Control For Beaglebone
Before 3.5.15.40
Control For Empc A/imx6
Before 3.5.15.40
Control For Iot2000
Before 3.5.15.40
Control For Linux
Before 3.5.15.40
Control For Pfc100
Before 3.5.15.40
Control For Pfc200
Before 3.5.15.40
Control For Plcnext
Before 3.5.15.40
Control For Raspberry Pi
Before 3.5.15.40
Codesys
Control Rte
From 3.5.8.60 to 3.5.15.40
Control Rte
From 3.5.8.60 to 3.5.15.40
Control Runtime System Toolkit
From 3.0 to 3.5.15.40
Control Win
From 3.5.9.80 to 3.5.15.40
Embedded Target Visu Toolkit
From 3.0 to 3.5.15.40
Hmi
From 3.5.10.0 to 3.5.15.40
Remote Target Visu Toolkit
From 3.0 to 3.5.15.40

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.