Threat Investigation
Request a demo

CVE-2020-15806

High

Description

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.

SeverityHigh
CVSS7.5
Exploit probability—
ProductCodesys Control For Beaglebone
PublishedJul 22, 2020
First seenJul 22, 2020

How to fix

Update
  • codesys control_for_beaglebone3.5.16.10 or later
  • codesys control_for_empc-a\/imx63.5.16.10 or later
  • codesys control_for_iot20003.5.16.10 or later
  • codesys control_for_linux3.5.16.10 or later
  • codesys control_for_pfc1003.5.16.10 or later
  • codesys control_for_pfc2003.5.16.10 or later
  • codesys control_for_plcnext3.5.16.10 or later
  • codesys control_for_raspberry_pi3.5.16.10 or later
  • codesys control_for_wago_touch_panels_6003.5.16.10 or later
  • codesys control_rte3.5.16.10 or later
  • codesys control_runtime_system_toolkit3.5.16.10 or later
  • codesys control_win3.5.16.10 or later

Affected products

ProductAffected versionsFixed in
codesys control_for_beaglebonev < 3.5.16.103.5.16.10
codesys control_for_empc-a\/imx6v < 3.5.16.103.5.16.10
codesys control_for_iot2000v < 3.5.16.103.5.16.10
codesys control_for_linuxv < 3.5.16.103.5.16.10
codesys control_for_pfc100v < 3.5.16.103.5.16.10
codesys control_for_pfc200v < 3.5.16.103.5.16.10
codesys control_for_plcnextv < 3.5.16.103.5.16.10
codesys control_for_raspberry_piv < 3.5.16.103.5.16.10
codesys control_for_wago_touch_panels_600v < 3.5.16.103.5.16.10
codesys control_rte3.5.8.60 ≤ v < 3.5.16.103.5.16.10
codesys control_runtime_system_toolkit3.0 ≤ v < 3.5.16.103.5.16.10
codesys control_win3.5.9.80 ≤ v < 3.5.16.103.5.16.10
codesys embedded_target_visu_toolkit3.0 ≤ v < 3.5.16.103.5.16.10
codesys hmi3.5.10.0 ≤ v < 3.5.16.103.5.16.10
codesys remote_target_visu_toolkit3.0 ≤ v < 3.5.16.103.5.16.10
codesys simulation_runtime3.5.9.40 ≤ v < 3.5.16.103.5.16.10

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.