medium6.5
CVE-2020-12068
An issue was discovered in CODESYS Development System before 3.5.16.0.
Impact
An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Control For Beaglebone | before 3.5.16.0 |
| Codesys | Control For Empc-A\/Imx6 | before 3.5.16.0 |
| Codesys | Control For Iot2000 | before 3.5.16.0 |
| Codesys | Control For Pfc100 | before 3.5.16.0 |
| Codesys | Control For Pfc200 | before 3.5.16.0 |
| Codesys | Control For Plcnext | before 3.5.16.0 |
| Codesys | Control For Raspberry Pi | before 3.5.16.0 |
| Codesys | Control Rte | from 3.0 before 3.5.16.0 |
| Codesys | Control Runtime System Toolkit | from 3.0 before 3.5.16.0 |
| Codesys | Control Win | from 3.0 before 3.5.16.0 |
| Codesys | Development System | before 3.5.16.0 |
| Codesys | Hmi | from 3.0 before 3.5.16.0 |
References
- NVD record
- CVE.org record
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=13136&token=c267875c01ea70bc9613bc39c684eedc17f55420&download=
- https://www.codesys.com
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=13136&token=c267875c01ea70bc9613bc39c684eedc17f55420&download=
- https://www.codesys.com