CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2019-9008
High (8.8) in codesys. EPSS 2.0% chance of exploitation in the next 30 days.
An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.
Severity
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- CWE
- CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- codesys:control_for_beaglebone
- codesys:control_for_empc-a\/imx6
- codesys:control_for_iot2000
- codesys:control_for_pfc100
- codesys:control_for_pfc200
- codesys:control_for_raspberry_pi
- codesys:control_rte
- codesys:control_win
- codesys:hmi
- codesys:simulation_runtime
References
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12939&token=5b93f0d95a68ff7461d2c249d8da00f16b8f9987&download=
- https://www.codesys.com/
- https://www.us-cert.gov/ics/advisories/icsa-19-255-03
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12939&token=5b93f0d95a68ff7461d2c249d8da00f16b8f9987&download=
- https://www.codesys.com/