CVE-2020-7052 - CVE House
Back to Database
Status published Medium CVE-2020-7052

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30...

Vulnerability Description

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-7052

Credits & Attribution

No credits recorded in the NVD database.

References

More from codesys

View All →
CVE-2022-22510
CODESYS: Null Pointer Dereference in CODESYS PROFINET stack
High 7.5
CVE-2021-36765
In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause...
High 7.5
CVE-2021-36764
In CODESYS Gateway V3 before 3.5.17.10, there is a NULL...
High 7.5
CVE-2021-36763
In CODESYS V3 web server before 3.5.17.10, files or directories...
High 7.5
CVE-2021-33486
All versions of the CODESYS V3 Runtime Toolkit for VxWorks...
High 7.5

Affected Vendor

Affected Software

control for beaglebone, control for empc-a\/imx6, control for iot2000, control for linux, control for pfc100, control for pfc200, control for plcnext, control for raspberry pi, control rte, control runtime system toolkit, control win, gateway, hmi, safety sil2, simulation runtime
Vulnerable Versions:
0, 3.5.8.60, 3.0, 3.5.9.80, 3.5.15.10, 3.5.10.0, 3.5.9.40

Timeline

Official Publish: January 24th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.