High severity · published Aug 15, 2019
CVE-2019-9013
An issue was discovered in 3S-Smart CODESYS V3 products
8.8
CVSS
0.3%
EPSS
No
On KEV
Description
An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected during transport. All variants of the following CODESYS V3 products in all versions containing the CmpUserMgr component are affected regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control RTE V3, CODESYS Control RTE V3 (for Beckhoff CX), CODESYS Control Win V3 (also part of the CODESYS Development System setup), CODESYS V3 Simulation Runtime (part of the CODESYS Development System), CODESYS Control V3 Runtime System Toolkit, CODESYS HMI V3.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Control For Beaglebone SL · Codesys
3.0 before 3.5.16.0 · source: NVD
CF
Control For Empc-a/imx6 SL · Codesys
3.0 before 3.5.16.0 · source: NVD
CF
Control For Iot2000 SL · Codesys
3.0 before 3.5.16.0 · source: NVD
CF
Control For Linux SL · Codesys
3.0 before 3.5.16.0 · source: NVD
CF
Control For Pfc100 SL · Codesys
3.0 before 3.5.16.0 · source: NVD
CF
Control For Pfc200 SL · Codesys
3.0 before 3.5.16.0 · source: NVD
CR
Control Rte SL · Codesys
3.0 before 3.5.16.0 · source: NVD
CW
Control Win SL · Codesys
3.0 before 3.5.16.0 · source: NVD
DS
Development System · Codesys
3.0 before 3.5.16.0 · source: NVD
HS
Hmi SL · Codesys
3.0 before 3.5.16.0 · source: NVD
RP
Raspberry PI · Codesys
3.0 before 3.5.16.0 · source: NVD
RT
Runtime Toolkit · Codesys
3.0 before 3.5.16.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-9013
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-9013
Vendor Advisory
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12943&token=d097958a67ba382de688916f77e3013c0802fade&download=
Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-213-04
More from Control For Beaglebone SL
9.8
CVE-2019-9010
An issue was discovered in 3S-Smart CODESYS V3 products
9.8
CVE-2018-10612
In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which…
8.8
CVE-2023-6357
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the…
8.8
CVE-2022-4046
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access…
8.8
CVE-2022-47390
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…