Lucene search

[email protected]CVE-2019-13542

HistorySep 17, 2019 - 7:15 p.m.

CVE-2019-13542

2019-09-1719:15:10

CWE-476

[email protected]

web.nvd.nist.gov

3s-smart

software solutions gmbh

codesys v3

opc ua server

vulnerability

cve-2019-13542

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.2%

JSON

3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition.

Affected configurations

NVD

Node

codesyscontrol_for_beagleboneRange3.5.11.0–3.5.15.0

codesyscontrol_for_empc-a\/imx6Range3.5.11.0–3.5.15.0

codesyscontrol_for_iot2000Range3.5.11.0–3.5.15.0

codesyscontrol_for_pfc100Range3.5.11.0–3.5.15.0

codesyscontrol_for_pfc200Range3.5.11.0–3.5.15.0

codesyscontrol_for_raspberry_piRange3.5.11.0–3.5.15.0

codesyscontrol_rteRange3.5.11.0–3.5.15.0

codesyscontrol_winRange3.5.11.0–3.5.15.0

codesyslinuxRange3.5.11.0–3.5.15.0

codesysruntime_system_toolkitRange3.5.11.0–3.5.15.0

CPENameOperatorVersion
codesys:control_for_beaglebonecodesys control for beaglebonelt3.5.15.0
codesys:control_for_empc-a\/imx6codesys control for empc-a/imx6lt3.5.15.0
codesys:control_for_iot2000codesys control for iot2000lt3.5.15.0
codesys:control_for_pfc100codesys control for pfc100lt3.5.15.0
codesys:control_for_pfc200codesys control for pfc200lt3.5.15.0
codesys:control_for_raspberry_picodesys control for raspberry pilt3.5.15.0
codesys:control_rtecodesys control rtelt3.5.15.0
codesys:control_wincodesys control winlt3.5.15.0
codesys:linuxcodesys linuxlt3.5.15.0
codesys:runtime_system_toolkitcodesys runtime system toolkitlt3.5.15.0

CPE	Name	Operator	Version
codesys:control_for_beaglebone	codesys control for beaglebone	lt	3.5.15.0
codesys:control_for_empc-a\/imx6	codesys control for empc-a/imx6	lt	3.5.15.0
codesys:control_for_iot2000	codesys control for iot2000	lt	3.5.15.0
codesys:control_for_pfc100	codesys control for pfc100	lt	3.5.15.0
codesys:control_for_pfc200	codesys control for pfc200	lt	3.5.15.0
codesys:control_for_raspberry_pi	codesys control for raspberry pi	lt	3.5.15.0
codesys:control_rte	codesys control rte	lt	3.5.15.0
codesys:control_win	codesys control win	lt	3.5.15.0
codesys:linux	codesys linux	lt	3.5.15.0
codesys:runtime_system_toolkit	codesys runtime system toolkit	lt	3.5.15.0

CNA Affected

[
  {
    "product": "3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server",
    "vendor": "GmbH",
    "versions": [
      {
        "status": "affected",
        "version": "all versions 3.5.11.0 to 3.5.15.0"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-19-255-04

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.2%

JSON

Related for CVE-2019-13542

prion1 cvelist1 nvd1 ics1