CVE-2019-13538 - CVE House
Back to Database
Status published High CVE-2019-13538

3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions...

Vulnerability Description

3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. The issue also exists for source libraries, but 3S-Smart Software Solutions GmbH strongly recommends distributing compiled libraries only.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13538

Credits & Attribution

No credits recorded in the NVD database.

References

More from codesys

View All →
CVE-2022-22510
CODESYS: Null Pointer Dereference in CODESYS PROFINET stack
High 7.5
CVE-2021-36765
In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause...
High 7.5
CVE-2021-36764
In CODESYS Gateway V3 before 3.5.17.10, there is a NULL...
High 7.5
CVE-2021-36763
In CODESYS V3 web server before 3.5.17.10, files or directories...
High 7.5
CVE-2021-33486
All versions of the CODESYS V3 Runtime Toolkit for VxWorks...
High 7.5

Affected Vendor

Affected Software

codesys
Vulnerable Versions:
0

Timeline

Official Publish: September 17th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-79

MITRE ATT&CK TTPs

T1189 Drive-by Compromise
Initial Access
T1059.007 JavaScript
Execution
T1539 Steal Web Session Cookie
Collection
T1213 Data from Information Repositories
Collection
T1567 Exfiltration Over Web Service
Exfiltration
T1491.001 Defacement
Impact