Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2020-12069

CODESYS V3 prone to Inadequate Password Hashing

In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Codesys Festo Pilz and 1 more
Products
Control For Beaglebone Control For Empc-a\/imx6 Control For Iot2000 and 111 more
CVE-2020-12067

In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the current password.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Pilz
Products
Pmc
CVE-2019-9011

In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Pilz
Products
Pmc