CVE-2020-15806
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.
Affected (17)
Products: Codesys: Control For Beaglebone, Control For Empc A/imx6, Control For Iot2000, Control For Linux, Control For Pfc100, Control For Pfc200, Control For Plcnext, Control For Raspberry Pi, Control For Wago Touch Panels 600, Control Rte, Control Runtime System Toolkit, Control Win, Embedded Target Visu Toolkit, Hmi, Remote Target Visu Toolkit, Simulation Runtime
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.5.16.10 | |
| Before 3.5.16.10 | |
| Before 3.5.16.10 | |
| Before 3.5.16.10 | |
| Before 3.5.16.10 | |
| Before 3.5.16.10 | |
| Before 3.5.16.10 | |
| Before 3.5.16.10 | |
| Before 3.5.16.10 | |
| From 3.5.8.60 to 3.5.16.10 | |
| From 3.0 to 3.5.16.10 | |
| From 3.5.9.80 to 3.5.16.10 | |
| From 3.0 to 3.5.16.10 | |
| From 3.5.10.0 to 3.5.16.10 | |
| From 3.0 to 3.5.16.10 | |
| From 3.5.9.40 to 3.5.16.10 |
References (6)
Source: cve@mitre.org
MitigationVendor Advisory
Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Timeline
No history available yet.