3S-Smart Software Solutions GmbH CODESYS V3 (Update A)
Successful exploitation of this vulnerability could allow for an attacker with access to PLC traffic to obtain user credentials.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-9013US | high8.8OT elevated | — | ||
An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected duri… | ||||
references
External citations — patches, advisories, analysis.
remediations (13)
- MitigationCODESYS Control RTE V3 (for Beckhoff CX) containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS Control RTE V3 containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS Control V3 Runtime System Toolkit containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS Control Win V3 (also part of the CODESYS Development System setup) containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS Control for BeagleBone containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS Control for IOT2000 containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS Control for Linux containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS Control for PFC100 containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS Control for PFC200 containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS Control for Raspberry Pi containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS Control for emPC-A/iMX6 containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS HMI V3 containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download - MitigationCODESYS V3 Simulation Runtime (part of the CODESYS Development System) containing the CmpUserMgr component
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0
https://www.codesys.com/download
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan