Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities
The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a worst case, attackers could execute arbitrary program code on the PC on which the PMC programming tool is used.
describes (27)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-9011US | medium5.3 | — | ||
In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames. | ||||
| CVE-2020-12069US | high7.8 | — | ||
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing… | ||||
| CVE-2020-12067US | high7.5 | — | ||
In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the current password. | ||||
| CVE-2021-21869US | high7.8 | — | ||
An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A spe… | ||||
| CVE-2021-21868US | high7.8 | — | ||
An unsafe deserialization vulnerability exists in the ObjectManager.plugin Project.get_MissingTypes() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A… | ||||
| CVE-2021-21867US | high7.8 | — | ||
An unsafe deserialization vulnerability exists in the ObjectManager.plugin ObjectStream.ProfileByteArray functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17.… | ||||
| CVE-2021-21863US | high7.8 | — | ||
A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially craft… | ||||
| CVE-2021-36764US | high7.5 | — | ||
In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products an… | ||||
| CVE-2021-21866US | high7.8 | — | ||
A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17.… | ||||
| CVE-2021-21865US | high7.8 | — | ||
A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of CODESYS GmbH CODESYS Development System 3.5.16. A specially… | ||||
| CVE-2021-21864US | high7.8 | — | ||
A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.… | ||||
| CVE-2021-29240US | high7.8OT elevated | — | ||
The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with mal… | ||||
| CVE-2021-29242US | high7.3 | — | ||
CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-r… | ||||
| CVE-2021-29241US | high7.5 | — | ||
CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS). | ||||
| CVE-2021-29239US | high7.8OT elevated | — | ||
CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity. | ||||
| CVE-2020-16233US | high7.5 | — | ||
An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data from the heap. | ||||
| CVE-2020-14519US | high7.5 | — | ||
This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected We… | ||||
| CVE-2020-14517US | critical9.8OT elevated | — | ||
Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if CodeMeter Runtime is running as server) and… | ||||
| CVE-2020-14515US | high7.5 | — | ||
CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file signature checking mechanism, which allows… | ||||
| CVE-2020-14513US | high7.5 | — | ||
CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unverified length fields. | ||||
references
External citations — patches, advisories, analysis.
remediations (54)
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- MitigationPMC programming tool 3.x.x
Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
- FixedPMC programming tool 3.x.x
Installation of the software version 3.5.17
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan