CVE-2020-15806

HIGH

CODESYS Control Runtime System < 3.5.16.10 - Uncontrolled Memory Allocation

Title source: llm
STIX 2.1

Description

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://www.codesys.com
Exploit, Third Party Advisory x_refsource_misc
https://www.tenable.com/security/research/tra-2020-46

Scores

CVSS v3 7.5
EPSS 0.0205
EPSS Percentile 78.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-401
Status published
Products (16)
codesys/control_for_beaglebone < 3.5.16.10
codesys/control_for_empc-a\/imx6 < 3.5.16.10
codesys/control_for_iot2000 < 3.5.16.10
codesys/control_for_linux < 3.5.16.10
codesys/control_for_pfc100 < 3.5.16.10
codesys/control_for_pfc200 < 3.5.16.10
codesys/control_for_plcnext < 3.5.16.10
codesys/control_for_raspberry_pi < 3.5.16.10
codesys/control_for_wago_touch_panels_600 < 3.5.16.10
codesys/control_rte 3.5.8.60 - 3.5.16.10 (2 CPE variants)
... and 6 more
Published Jul 22, 2020
Tracked Since Feb 18, 2026