CVE-2019-19789

published 2019-12-20

CVE-2019-19789: 3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
codesys	plcwinnt	< 2.4.7.54	2.4.7.54
codesys	runtime_toolkit	< 2.4.7.54	2.4.7.54
codesys	sp_realtime_nt	< 2.3.7.28	2.3.7.28

CWE-476