CVE-2018-10612: Critical severity codesys control vulnerability
In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which could allow an attacker access to the device and sensitive information, including user credentials.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-10612?
CVE-2018-10612 is a vulnerability in 3S-Smart Software Solutions GmbH CODESYS Control V3 products.
What is the severity of CVE-2018-10612?
CVE-2018-10612 has a severity rating of 9.8 (critical).
What is affected by CVE-2018-10612?
CVE-2018-10612 affects various CODESYS Control V3 products, including Codesys Control For Beaglebone Sl, Codesys Control For Empc-a/imx6 Sl, Codesys Control For Iot2000 Sl, Codesys Control For Linux Sl, Codesys Control For Pfc100 Sl, Codesys Control For Pfc200 Sl, Codesys Control For Raspberry Pi Sl, Codesys Control Rte Sl, Codesys Control Runtime Toolkit, Codesys Control Win Sl, CODESYS Development System V3, and Codesys Hmi Sl.
What is the vulnerability of CVE-2018-10612?
CVE-2018-10612 allows an attacker access to the device and sensitive information, including user credentials, due to user access management and communication encryption not being enabled by default.
How can CVE-2018-10612 be fixed?
To fix CVE-2018-10612, users should enable user access management and communication encryption in the affected CODESYS Control V3 products.