CVE-2018-20025
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
- Score
- CVSS 3.0 7.5 High
- Status
- Modified - vulnerability@kaspersky.com
- Published
- 2019-02-19
- Last modified
- 2024-09-16
- Weaknesses
- CWE-330
Affected products
- Control For Beaglebone Sl (Codesys)
- Control For Empc-a/imx6 Sl (Codesys)
- Control For Iot2000 Sl (Codesys)
- Control For Linux Sl (Codesys)
- Control For Pfc100 Sl (Codesys)
- Control For Pfc200 Sl (Codesys)
- Control For Raspberry Pi Sl (Codesys)
- Control Rte Sl (Codesys)
- Control Rte Sl (for Beckhoff Cx) (Codesys)
- Control Runtime Toolkit (Codesys)
- Control Win Sl (Codesys)
- Development System (Codesys)
- Gateway (Codesys)
- Hmi Sl (Codesys)
- Safety Sil2 (Codesys)
- Codesys V3 Products (Kaspersky Lab)
References
- http://www.securityfocus.com/bid/106251
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-037-codesys-control-v3-use-of-insuffic…
- https://ics-cert.us-cert.gov/advisories/ICSA-18-352-04
