ICSA-18-352-03

icsaUScisa_csaf_ot

3S-Smart Software Solutions GmbH CODESYS Control V3 Products

view advisory published 2018-12-18

Successful exploitation of this vulnerability could allow unauthorized access and exfiltration of sensitive data including user credentials.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2018-10612UScritical9.8OT elevated—
In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which coul…
02

references

External citations — patches, advisories, analysis.

03

remediations (14)

  • MitigationCODESYS Control RTE V3

    Activate and apply user management and password features

  • MitigationCODESYS Control RTE V3 (for Beckhoff CX)

    Activate and apply user management and password features

  • MitigationCODESYS Control V3 Runtime System Toolkit

    Activate and apply user management and password features

  • MitigationCODESYS Control Win V3 (also part of the CODESYS setup)

    Activate and apply user management and password features

  • MitigationCODESYS Control for BeagleBone

    Activate and apply user management and password features

  • MitigationCODESYS Control for IOT2000

    Activate and apply user management and password features

  • MitigationCODESYS Control for Linux

    Activate and apply user management and password features

  • MitigationCODESYS Control for PFC100

    Activate and apply user management and password features

  • MitigationCODESYS Control for PFC200

    Activate and apply user management and password features

  • MitigationCODESYS Control for Raspberry Pi

    Activate and apply user management and password features

  • MitigationCODESYS Control for emPC-A/iMX6

    Activate and apply user management and password features

  • MitigationCODESYS HMI V3

    Activate and apply user management and password features

  • MitigationCODESYS V3 Simulation Runtime (part of the CODESYS Development System)

    Activate and apply user management and password features

  • MitigationControl for BeagleBone

    Activate and apply user management and password features

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan