← Back

CVE-2020-7052

nvd nist
Published: Jan 24, 2020Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.

Affected (16)

Codesys
15 products
Control For Beaglebone
Control For Empc A/imx6
Control For Iot2000
Control For Linux
Control For Pfc100
Control For Pfc200
Control For Plcnext
Control For Raspberry Pi
Control Rte
Control Runtime System Toolkit
Control Win
Gateway
Hmi
Safety Sil2
Simulation Runtime
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Control For Beaglebone
Before 3.5.15.30
Control For Empc A/imx6
Before 3.5.15.30
Control For Iot2000
Before 3.5.15.30
Control For Linux
Before 3.5.15.30
Control For Pfc100
Before 3.5.15.30
Control For Pfc200
Before 3.5.15.30
Control For Plcnext
Before 3.5.15.30
Control For Raspberry Pi
Before 3.5.15.30
Codesys
Control Rte
From 3.5.8.60 to 3.5.15.30
Control Rte
From 3.5.8.60 to 3.5.15.30
Control Runtime System Toolkit
From 3.0 to 3.5.15.30
Control Win
From 3.5.9.80 to 3.5.15.30
Gateway
From 3.5.15.10 to 3.5.15.30
Hmi
From 3.5.10.0 to 3.5.15.30
Safety Sil2
From 3.0 to 3.5.15.30
Simulation Runtime
From 3.5.9.40 to 3.5.15.30

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.