CVE-2018-20025

EPSS

2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)

CWE

CWE-330

Published

2019-02-19

Modified

2026-06-17

Record from

the NVD, synced 2026-10-19

Affected

• codesys:control_for_beaglebone_sl
• codesys:control_for_empc-a\/imx6_sl
• codesys:control_for_iot2000_sl
• codesys:control_for_linux_sl
• codesys:control_for_pfc100_sl
• codesys:control_for_pfc200_sl
• codesys:control_for_raspberry_pi_sl
• codesys:control_rte_sl
• codesys:control_rte_sl_\(for_beckhoff_cx\)
• codesys:control_runtime_toolkit
• codesys:control_win_sl
• codesys:development_system
• codesys:gateway
• codesys:hmi_sl
• codesys:safety_sil2

References

• http://www.securityfocus.com/bid/106251
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-037-codesys-control-v3-use-of-insufficiently-random-values/
• https://ics-cert.us-cert.gov/advisories/ICSA-18-352-04
• http://www.securityfocus.com/bid/106251
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-037-codesys-control-v3-use-of-insufficiently-random-values/

Check your stackJSON