CVE-2019-9008

published 2019-09-17

CVE-2019-9008: An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
codesys	control_for_beaglebone	< 3.5.13.0	3.5.13.0
codesys	control_for_empc-a_imx6	< 3.5.13.0	3.5.13.0
codesys	control_for_iot2000	< 3.5.13.0	3.5.13.0
codesys	control_for_pfc100	< 3.5.13.0	3.5.13.0
codesys	control_for_pfc200	< 3.5.13.0	3.5.13.0
codesys	control_for_raspberry_pi	< 3.5.13.0	3.5.13.0
codesys	control_rte	< 3.5.13.0	3.5.13.0
codesys	control_win	< 3.5.13.0	3.5.13.0
codesys	hmi	< 3.5.13.0	3.5.13.0
codesys	simulation_runtime	< 3.5.13.0	3.5.13.0

CWE-732