CVE-2018-20025: High severity codesys control vulnerability
Published Feb 19, 2019
·Updated
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
Affected Software
15 affected components
CODESYS Control For Beaglebone Sl>=3.0<3.5.14.0
CODESYS Control For Empc-a\/imx6 Sl>=3.0<3.5.14.0
CODESYS Control For Iot2000 Sl>=3.0<3.5.14.0
CODESYS Control For Linux Sl>=3.0<3.5.14.0
CODESYS Control For Pfc100 Sl>=3.0<3.5.14.0
CODESYS Control For Pfc200 Sl>=3.0<3.5.14.0
CODESYS Control For Raspberry Pi Sl>=3.0<3.5.14.0
CODESYS Control Rte Sl>=3.0<3.5.14.0
CODESYS Control Rte Sl \(for Beckhoff Cx\)>=3.0<3.5.14.0
CODESYS Control Runtime Toolkit>=3.0<3.5.14.0
CODESYS Control Win Sl>=3.0<3.5.14.0
CODESYS Development System>=3.0<3.5.14.0
CODESYS gateway>=3.0<3.5.14.0
CODESYS Hmi Sl>=3.0<3.5.14.0
CODESYS Safety Sil2>=3.0<3.5.14.0
Event History
Feb 19, 2019
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2018-20025?
CVE-2018-20025 is a vulnerability that exists in CODESYS V3 products versions prior to V3.5.14.0 due to the use of insufficiently random values.
2
What is the severity of CVE-2018-20025?
The severity of CVE-2018-20025 is high with a CVSS score of 7.5.
3
Which CODESYS V3 products are affected by CVE-2018-20025?
CODESYS V3 products versions prior to V3.5.14.0 are affected by CVE-2018-20025.
4
How does CVE-2018-20025 impact CODESYS V3 products?
CVE-2018-20025 allows attackers to predict values used for cryptographic operations, which can lead to unauthorized access, data tampering, or denial of service.
5
Where can I find more information about CVE-2018-20025?
More information about CVE-2018-20025 can be found at the following references: [1] [2] [3].