CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2020-7052
Medium (6.5) in codesys. EPSS 2.2% chance of exploitation in the next 30 days.
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
Severity
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWE
- CWE-770
- Published
- Modified
- Record from
- the NVD, synced
Affected
- codesys:control_for_beaglebone
- codesys:control_for_empc-a\/imx6
- codesys:control_for_iot2000
- codesys:control_for_linux
- codesys:control_for_pfc100
- codesys:control_for_pfc200
- codesys:control_for_plcnext
- codesys:control_for_raspberry_pi
- codesys:control_rte
- codesys:control_runtime_system_toolkit
- codesys:control_win
- codesys:gateway
- codesys:hmi
- codesys:safety_sil2
- codesys:simulation_runtime
References
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12977&token=33f948eed0c2fd69d238d9515779be337ef7592d&download=
- https://www.tenable.com/security/research/tra-2020-04
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12977&token=33f948eed0c2fd69d238d9515779be337ef7592d&download=
- https://www.tenable.com/security/research/tra-2020-04