high7.5
CVE-2018-20025
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
Impact
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Control For Beaglebone Sl | from 3.0 before 3.5.14.0 |
| Codesys | Control For Empc-A\/Imx6 Sl | from 3.0 before 3.5.14.0 |
| Codesys | Control For Iot2000 Sl | from 3.0 before 3.5.14.0 |
| Codesys | Control For Linux Sl | from 3.0 before 3.5.14.0 |
| Codesys | Control For Pfc100 Sl | from 3.0 before 3.5.14.0 |
| Codesys | Control For Pfc200 Sl | from 3.0 before 3.5.14.0 |
| Codesys | Control For Raspberry Pi Sl | from 3.0 before 3.5.14.0 |
| Codesys | Control Rte Sl | from 3.0 before 3.5.14.0 |
| Codesys | Control Rte Sl \(For Beckhoff Cx\) | from 3.0 before 3.5.14.0 |
| Codesys | Control Runtime Toolkit | from 3.0 before 3.5.14.0 |
| Codesys | Control Win Sl | from 3.0 before 3.5.14.0 |
| Codesys | Development System | from 3.0 before 3.5.14.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106251
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-037-codesys-control-v3-use-of-insufficiently-random-values/
- https://ics-cert.us-cert.gov/advisories/ICSA-18-352-04
- http://www.securityfocus.com/bid/106251
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-037-codesys-control-v3-use-of-insufficiently-random-values/
- https://ics-cert.us-cert.gov/advisories/ICSA-18-352-04