CVE:CVE-2020-12068
CNNVD:CNNVD-202005-810
3S-Smart Software Solutions CODESYS Development System是德国3S-Smart Software Solutions公司的一套用于工业控制器和自动化技术领域的编程工具。
3S-Smart Software Solutions CODESYS Development System 3.5.16.0之前版本中的CODESYS WebVisu和CODESYS Remote TargetVisu存在安全漏洞。攻击者可利用该漏洞提升权限。
solution:Upgrade codesys control_for_beaglebone to a higher version than 3.5.16.0,and avoid the version (,3.5.16.0); Upgrade codesys control_for_empc-a/imx6 to a higher version than 3.5.16.0,and avoid the version (,3.5.16.0); Upgrade codesys control_for_iot2000 to a higher version than 3.5.16.0,and avoid the version (,3.5.16.0); Upgrade codesys control_for_pfc100 to a higher version than 3.5.16.0,and avoid the version (,3.5.16.0); Upgrade codesys control_for_pfc200 to a higher version than 3.5.16.0,and avoid the version (,3.5.16.0); Upgrade codesys control_for_plcnext to a higher version than 3.5.16.0,and avoid the version (,3.5.16.0); Upgrade codesys control_for_raspberry_pi to a higher version than 3.5.16.0,and avoid the version (,3.5.16.0); Upgrade codesys control_rte to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_runtime_system_toolkit to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_win to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys development_system to a higher version than 3.5.16.0,and avoid the version (,3.5.16.0); Upgrade codesys hmi to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0)