CVE-2020-12068

Published: May 14, 2020Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.

Affected (12)

Products: Codesys: Control For Beaglebone, Control For Empc A/imx6, Control For Iot2000, Control For Pfc100, Control For Pfc200, Control For Plcnext, Control For Raspberry Pi, Control Rte, Control Runtime System Toolkit, Control Win, Development System, Hmi

Codesys

12 products

Control For Beaglebone

Control For Empc A/imx6

Control For Raspberry Pi

Control Rte

Control Runtime System Toolkit

Control Win

Development System

Hmi

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Codesys Control For Beaglebone	Before 3.5.16.0
Codesys Control For Empc A/imx6	Before 3.5.16.0
Codesys Control For Iot2000	Before 3.5.16.0
Codesys Control For Pfc100	Before 3.5.16.0
Codesys Control For Pfc200	Before 3.5.16.0
Codesys Control For Plcnext	Before 3.5.16.0
Codesys Control For Raspberry Pi	Before 3.5.16.0
Codesys Control Rte	From 3.0 to 3.5.16.0
Codesys Control Runtime System Toolkit	From 3.0 to 3.5.16.0
Codesys Control Win	From 3.0 to 3.5.16.0
Codesys Development System	Before 3.5.16.0
Codesys Hmi	From 3.0 to 3.5.16.0

References (4)

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=13136&token=c267875c01ea70bc9613bc39c684eedc17f55420&download=

Source: cve@mitre.org

MitigationVendor Advisory

https://www.codesys.com

Source: cve@mitre.org

Product

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=13136&token=c267875c01ea70bc9613bc39c684eedc17f55420&download=

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

https://www.codesys.com

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.