Description
3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition.
References (1)
Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.us-cert.gov/ics/advisories/icsa-19-255-04
Scores
CVSS v3
6.5
EPSS
0.0137
EPSS Percentile
68.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (10)
codesys/control_for_beaglebone
3.5.11.0 - 3.5.15.0
codesys/control_for_empc-a\/imx6
3.5.11.0 - 3.5.15.0
codesys/control_for_iot2000
3.5.11.0 - 3.5.15.0
codesys/control_for_pfc100
3.5.11.0 - 3.5.15.0
codesys/control_for_pfc200
3.5.11.0 - 3.5.15.0
codesys/control_for_raspberry_pi
3.5.11.0 - 3.5.15.0
codesys/control_rte
3.5.11.0 - 3.5.15.0
codesys/control_win
3.5.11.0 - 3.5.15.0
codesys/linux
3.5.11.0 - 3.5.15.0
codesys/runtime_system_toolkit
3.5.11.0 - 3.5.15.0
Published
Sep 17, 2019
Tracked Since
Feb 18, 2026