CVE-2019-18858: Buffer Overflow
Published Nov 20, 2019
·Updated
CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.
Affected Software
14 affected components
CODESYS Control For Beaglebone<3.5.15.20
CODESYS Control For Empc-a\/imx6<3.5.15.20
CODESYS Control For Iot2000<3.5.15.20
CODESYS Control For Linux<3.5.15.20
CODESYS Control For Pfc100<3.5.15.20
CODESYS Control For Pfc200<3.5.15.20
CODESYS Control For Plcnext<3.5.15.20
CODESYS Control For Raspberry Pi<3.5.15.20
CODESYS Control Rte<3.5.15.20
CODESYS Control Runtime System Toolkit<3.5.15.20
CODESYS Control Win<3.5.15.20
CODESYS Embedded Target Visu Toolkit<3.5.15.20
CODESYS HMI<3.5.15.20
CODESYS Remote Target Visu Toolkit<3.5.15.20
Event History
Nov 20, 2019
CVE Published
via MITRE·05:04 PM
Data Sourced
via MITRE·05:04 PM
Description
Frequently Asked Questions
1
What is CVE-2019-18858?
CVE-2019-18858 is a vulnerability in the CODESYS 3 web server, before version 3.5.15.20, that could lead to a buffer overflow.
2
How severe is CVE-2019-18858?
CVE-2019-18858 has a severity score of 9.8, making it a critical vulnerability.
3
Which software versions are affected by CVE-2019-18858?
CODESYS Control runtime systems with versions up to (but not including) 3.5.15.20 are affected by CVE-2019-18858.
4
How can I fix CVE-2019-18858?
To fix CVE-2019-18858, it is recommended to update CODESYS Control runtime systems to version 3.5.15.20 or later.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-18858?
CVE-2019-18858 is associated with CWE-119 and CWE-120.