CVE-2020-6081
HIGHCODESYS Runtime 3.5.14.30 - Remote Code Execution via PLC_Task Network Request
Title source: llmDescription
An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1003
Scores
CVSS v3
8.8
EPSS
0.0176
EPSS Percentile
75.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-345
Status
published
Products (1)
codesys/runtime
3.5.14.30
Published
May 07, 2020
Tracked Since
Feb 18, 2026