FlagThis
← Back to CVE List
Vulnerability Intelligence Report

CVE-2020-15806

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.

No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:2.05%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Affected Products & Versions

Vendor Product Affected Versions
No affected products specified.

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗
No reference links found.

Threat Intelligence Signals

EPSS Score
2.047%
GitHub Advisory
GHSA-fp2p-fx97-wr62 ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2020-07-17T00:00:00
Published2020-07-22T18:14:43
Last Updated2024-08-04T13:30:22

Related Intelligence

Related CVEs
CVE-2020-10245 CVSS 9.8 — CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control run…
CVE-2019-18858 CVSS 9.8 — CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Con…
CVE-2019-13548 CVSS 9.8 — CODESYS V3 web server, all versions prior to 3.5.14.10, allows an atta…
CVE-2019-9008 CVSS 8.8 — An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A us…
CVE-2019-9009 CVSS 7.5 — An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted …
LINK COPIED TO CLIPBOARD