3S-Smart Software Solutions GmbH CODESYS V3 Products
view advisory published 2018-12-18
Successful exploitation of these vulnerabilities could allow a remote attacker to disguise the source of malicious communication packets and also exploit a random values weakness affecting confidentiality and integrity of data stored on the device.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-20026US | high7.5 | — | ||
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0. | ||||
| CVE-2018-20025US | high7.5OT elevated | — | ||
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationCODESYS V3 products
Activate and apply user management and password features
- MitigationCODESYS V3 products
Activate and apply user management and password features
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan