CVE-2020-12069
High
Description
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.
SeverityHigh
CVSS7.8
Exploit probability—
ProductCodesys Control For Beaglebone
PublishedDec 26, 2022
First seenDec 26, 2022
Weakness typeCWE-916CWE-916
How to fix
Update
- codesys control_for_beaglebone3.5.16.0 or later
- pilz pmc3.5.17 or later
- codesys control_for_empc-a\/imx63.5.16.0 or later
- codesys control_for_iot20003.5.16.0 or later
- codesys control_for_linux3.5.16.0 or later
- codesys control_for_pfc1003.5.16.0 or later
- codesys control_for_pfc2003.5.16.0 or later
- codesys control_for_plcnext3.5.16.0 or later
- codesys control_for_raspberry_pi3.5.16.0 or later
- codesys control_rte_v33.5.16.0 or later
- codesys control_v3_runtime_system_toolkit3.5.16.0 or later
- codesys control_win_v33.5.16.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codesys control_for_beaglebone | v < 3.5.16.0 | 3.5.16.0 |
| pilz pmc | 3.0.0 ≤ v < 3.5.17 | 3.5.17 |
| codesys control_for_empc-a\/imx6 | v < 3.5.16.0 | 3.5.16.0 |
| codesys control_for_iot2000 | v < 3.5.16.0 | 3.5.16.0 |
| codesys control_for_linux | v < 3.5.16.0 | 3.5.16.0 |
| codesys control_for_pfc100 | v < 3.5.16.0 | 3.5.16.0 |
| codesys control_for_pfc200 | v < 3.5.16.0 | 3.5.16.0 |
| codesys control_for_plcnext | v < 3.5.16.0 | 3.5.16.0 |
| codesys control_for_raspberry_pi | v < 3.5.16.0 | 3.5.16.0 |
| codesys control_rte_v3 | v < 3.5.16.0 | 3.5.16.0 |
| codesys control_v3_runtime_system_toolkit | v < 3.5.16.0 | 3.5.16.0 |
| codesys control_win_v3 | v < 3.5.16.0 | 3.5.16.0 |
| codesys hmi_v3 | v < 3.5.16.0 | 3.5.16.0 |
| codesys v3_simulation_runtime | v < 3.5.16.0 | 3.5.16.0 |
| festo controller_cecc-d_firmware | 2.3.8.0, 2.3.8.1 | — |
| festo controller_cecc-lk_firmware | 2.3.8.0, 2.3.8.1 | — |
| festo controller_cecc-s_firmware | 2.3.8.0, 2.3.8.1 | — |
| wago 750-8217_firmware | No range specified | — |
| wago 750-8216_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8215_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8214_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8213_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8212_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8211_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8210_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8207_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8206_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8204_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8203_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8202_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8102_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8101_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 750-8100_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4201\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4202\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4203\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4204\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4205\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4205\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4206\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4206\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4301\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4302\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4303\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4304\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4305\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-4306\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-5203\/8000-001_firmware | v ≤ 03.06.19\(18\) | — |
| wago 762-5204\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-5205\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-5206\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-5303\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-5304\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-5305\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-5306\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-6201\/8000-001_firmware | v ≤ 03.06.19\(18\) | — |
| wago 762-6202\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-6203\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-6204\/8000-001_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-6301\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-6302\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-6303\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 762-6304\/8000-002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
| wago 752-8303\/8000-0002_firmware | v < 03.06.19\(18\) | 03.06.19\(18\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.