CVE:CVE-2020-7052
CNNVD:CNNVD-202001-1104
3S-Smart Software Solutions CODESYS Control是德国3S-Smart Software Solutions公司的一套工业控制程序编程软件。
3S-Smart Software Solutions CODESYS Control V3 3.5.15.30之前版本、Gateway V3 3.5.15.30之前版本和HMI V3 3.5.15.30之前版本中存在资源管理错误漏洞。该漏洞源于内存分配不当造成的远程拒绝服务。
solution:Upgrade codesys control_for_beaglebone to a higher version than 3.5.15.30,and avoid the version (,3.5.15.30); Upgrade codesys control_for_empc-a/imx6 to a higher version than 3.5.15.30,and avoid the version (,3.5.15.30); Upgrade codesys control_for_iot2000 to a higher version than 3.5.15.30,and avoid the version (,3.5.15.30); Upgrade codesys control_for_linux to a higher version than 3.5.15.30,and avoid the version (,3.5.15.30); Upgrade codesys control_for_pfc100 to a higher version than 3.5.15.30,and avoid the version (,3.5.15.30); Upgrade codesys control_for_pfc200 to a higher version than 3.5.15.30,and avoid the version (,3.5.15.30); Upgrade codesys control_for_plcnext to a higher version than 3.5.15.30,and avoid the version (,3.5.15.30); Upgrade codesys control_for_raspberry_pi to a higher version than 3.5.15.30,and avoid the version (,3.5.15.30); Upgrade codesys control_rte to a higher version than 3.5.15.30,and avoid the version [3.5.8.60,3.5.15.30); Upgrade codesys control_runtime_system_toolkit to a higher version than 3.5.15.30,and avoid the version [3.0,3.5.15.30); Upgrade codesys control_win to a higher version than 3.5.15.30,and avoid the version [3.5.9.80,3.5.15.30); Upgrade codesys gateway to a higher version than 3.5.15.30,and avoid the version [3.5.15.10,3.5.15.30); Upgrade codesys hmi to a higher version than 3.5.15.30,and avoid the version [3.5.10.0,3.5.15.30); Upgrade codesys safety_sil2 to a higher version than 3.5.15.30,and avoid the version [3.0,3.5.15.30); Upgrade codesys simulation_runtime to a higher version than 3.5.15.30,and avoid the version [3.5.9.40,3.5.15.30)