CVE-2018-20026

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-20026

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

I

mproper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.

References
Link Resource
http://www.securityfocus.com/bid/106251 Broken Link Third Party Advisory VDB Entry
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-036-codesys-control-v3-improper-communication-address-filtering/ Mitigation Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-352-04 Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/106251 Broken Link Third Party Advisory VDB Entry
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-036-codesys-control-v3-improper-communication-address-filtering/ Mitigation Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-352-04 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:control_runtime_toolkit:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:opc_server:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:plchandler:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:*
cpe:2.3:a:codesys:targetvisu_sl:*:*:*:*:*:*:*:*
History

21 Nov 2024, 04:00

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/106251 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/106251 - Broken Link, Third Party Advisory, VDB Entry
References () https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-036-codesys-control-v3-improper-communication-address-filtering/ - Mitigation, Third Party Advisory () https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-036-codesys-control-v3-improper-communication-address-filtering/ - Mitigation, Third Party Advisory
References () https://ics-cert.us-cert.gov/advisories/ICSA-18-352-04 - Third Party Advisory, US Government Resource () https://ics-cert.us-cert.gov/advisories/ICSA-18-352-04 - Third Party Advisory, US Government Resource
Information

Published : 2019-02-19 21:29

Updated : 2024-11-21 04:00

NVD link : CVE-2018-20026

Mitre link : CVE-2018-20026

CVE.ORG link : CVE-2018-20026

JSON object : View

Products Affected

codesys

CWE
NVD-CWE-noinfo