ICSA-19-255-02

icsaUScisa_csaf_ot

3S-Smart Software Solutions GmbH CODESYS V3 Library Manager (Update A)

view advisory published 2019-09-12

Successful exploitation of this vulnerability may allow malicious content from manipulated libraries to be displayed or executed.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-13538UShigh8.6—
3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, whic…
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • MitigationAll 32 and 64 bit CODESYS Development System V3

    3S-Smart Software Solutions GmbH continued investigating the issue after Version 3.5.15.0 was released as an initial mitigation. They have released version 3.5.16.0 as a more complete resolution for this vulnerability in all affected CODESYS products.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan