CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2018-10612
Critical (9.8) in codesys. EPSS 1.4% chance of exploitation in the next 30 days.
In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which could allow an attacker access to the device and sensitive information, including user credentials.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-311, CWE-732, CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- codesys:control_for_beaglebone_sl
- codesys:control_for_empc-a\/imx6_sl
- codesys:control_for_iot2000_sl
- codesys:control_for_linux_sl
- codesys:control_for_pfc100_sl
- codesys:control_for_pfc200_sl
- codesys:control_for_raspberry_pi_sl
- codesys:control_rte_sl
- codesys:control_runtime_toolkit
- codesys:control_win_sl
- codesys:development_system_v3
- codesys:hmi_sl