CVE:CVE-2020-15806
CNNVD:CNNVD-202007-1373
3S-Smart Software Solutions CODESYS Control是德国3S-Smart Software Solutions公司的一套工业控制程序编程软件。
3S-Smart Software Solutions CODESYS Control runtime system 3.5.16.10之前版本中存在安全漏洞，该漏洞源于程序没有控制内存分配。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade codesys control_for_beaglebone to a higher version than 3.5.16.10,and avoid the version (,3.5.16.10); Upgrade codesys control_for_empc-a/imx6 to a higher version than 3.5.16.10,and avoid the version (,3.5.16.10); Upgrade codesys control_for_iot2000 to a higher version than 3.5.16.10,and avoid the version (,3.5.16.10); Upgrade codesys control_for_linux to a higher version than 3.5.16.10,and avoid the version (,3.5.16.10); Upgrade codesys control_for_pfc100 to a higher version than 3.5.16.10,and avoid the version (,3.5.16.10); Upgrade codesys control_for_pfc200 to a higher version than 3.5.16.10,and avoid the version (,3.5.16.10); Upgrade codesys control_for_plcnext to a higher version than 3.5.16.10,and avoid the version (,3.5.16.10); Upgrade codesys control_for_raspberry_pi to a higher version than 3.5.16.10,and avoid the version (,3.5.16.10); Upgrade codesys control_for_wago_touch_panels_600 to a higher version than 3.5.16.10,and avoid the version (,3.5.16.10); Upgrade codesys control_rte to a higher version than 3.5.16.10,and avoid the version [3.5.8.60,3.5.16.10); Upgrade codesys control_runtime_system_toolkit to a higher version than 3.5.16.10,and avoid the version [3.0,3.5.16.10); Upgrade codesys control_win to a higher version than 3.5.16.10,and avoid the version [3.5.9.80,3.5.16.10); Upgrade codesys embedded_target_visu_toolkit to a higher version than 3.5.16.10,and avoid the version [3.0,3.5.16.10); Upgrade codesys hmi to a higher version than 3.5.16.10,and avoid the version [3.5.10.0,3.5.16.10); Upgrade codesys remote_target_visu_toolkit to a higher version than 3.5.16.10,and avoid the version [3.0,3.5.16.10); Upgrade codesys simulation_runtime to a higher version than 3.5.16.10,and avoid the version [3.5.9.40,3.5.16.10)