Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2020-7052 Details
Description
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12977&token=33f948eed0c2fd69d238d9515779be337ef7592d&download= | CVE | Vendor Advisory |
| https://www.tenable.com/security/research/tra-2020-04 | CVE | ExploitThird Party Advisory |
| https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12977&token=33f948eed0c2fd69d238d9515779be337ef7592d&download= | [email protected] | Vendor Advisory |
| https://www.tenable.com/security/research/tra-2020-04 | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-770 | Allocation of Resources Without Limits or Throttling | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| codesys control for beaglebone | < 3.5.15.30 |
CPE
Remediation
| |
| codesys control for empc-a/imx6 | < 3.5.15.30 |
CPE
Remediation
| |
| codesys control for iot2000 | < 3.5.15.30 |
CPE
Remediation
| |
| codesys control for linux | < 3.5.15.30 |
CPE
Remediation
| |
| codesys control for pfc100 | < 3.5.15.30 |
CPE
Remediation
| |
| codesys control for pfc200 | < 3.5.15.30 |
CPE
Remediation
| |
| codesys control for plcnext | < 3.5.15.30 |
CPE
Remediation
| |
| codesys control for raspberry pi | < 3.5.15.30 |
CPE
Remediation
| |
| codesys control rte | >= 3.5.8.60, < 3.5.15.30 |
CPE
Remediation
| |
| codesys control runtime system toolkit | >= 3.0, < 3.5.15.30 |
CPE
Remediation
| |
| codesys control win | >= 3.5.9.80, < 3.5.15.30 |
CPE
Remediation
| |
| codesys gateway | >= 3.5.15.10, < 3.5.15.30 |
CPE
Remediation
| |
| codesys hmi | >= 3.5.10.0, < 3.5.15.30 |
CPE
Remediation
| |
| codesys safety sil2 | >= 3.0, < 3.5.15.30 |
CPE
Remediation
| |
| codesys simulation runtime | >= 3.5.9.40, < 3.5.15.30 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jul 21, 2021 | CWE Remap | [email protected] |
| Jan 30, 2020 | Initial Analysis | [email protected] |