ICSA-19-213-04

icsaUScisa_csaf_ot

3S-Smart Software Solutions GmbH CODESYS V3 (Update A)

Advisory ansehen veröffentlicht 2019-08-01

Successful exploitation of this vulnerability could allow for an attacker with access to PLC traffic to obtain user credentials.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-9013UShigh8.8OT erhöht—
An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected duri…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (13)

  • MitigationCODESYS Control RTE V3 (for Beckhoff CX) containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS Control RTE V3 containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS Control V3 Runtime System Toolkit containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS Control Win V3 (also part of the CODESYS Development System setup) containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS Control for BeagleBone containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS Control for IOT2000 containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS Control for Linux containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS Control for PFC100 containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS Control for PFC200 containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS Control for Raspberry Pi containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS Control for emPC-A/iMX6 containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS HMI V3 containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
  • MitigationCODESYS V3 Simulation Runtime (part of the CODESYS Development System) containing the CmpUserMgr component

    3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by downloading Version 3.5.16.0

    https://www.codesys.com/download
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan