CVE-2019-9009

HIGH

CODESYS Control Runtime < 3.5.15.0 - Denial of Service via Crafted Network Packets

Title source: llm
STIX 2.1

Description

An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.

References (2)

Core 2
Core References
Mitigation, Third Party Advisory, US Government Resource x_refsource_misc
https://www.us-cert.gov/ics/advisories/icsa-19-255-05

Scores

CVSS v3 7.5
EPSS 0.0170
EPSS Percentile 74.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-755
Status published
Products (14)
codesys/control_for_beaglebone < 3.5.15.0
codesys/control_for_empc-a\/imx6 < 3.5.15.0
codesys/control_for_iot2000 < 3.5.15.0
codesys/control_for_pfc100 < 3.5.15.0
codesys/control_for_pfc200 < 3.5.15.0
codesys/control_for_raspberry_pi < 3.5.15.0
codesys/control_rte < 3.5.15.0
codesys/control_win < 3.5.15.0
codesys/gateway < 3.5.15.0
codesys/hmi < 3.5.15.0
... and 4 more
Published Sep 17, 2019
Tracked Since Feb 18, 2026