Skip to content
Sign in
7.8 High

CVE-2020-12069 In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system…

Description

In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.

Affected products and versions

Product Affected versions Fixed in
CODESYS V3 containing the CmpUserMgr 3 3 → < 3.5.16.0 3.5.16.0
Track this CVE