CVE:CVE-2019-9013
CNNVD:CNNVD-201908-155
3s-smart Software Solutions CODESYS Control是德国德国3S智能软件系统方案有限公司（3s-smart Software Solutions）公司的一套工业控制程序编程软件。
多款3S-Smart Software Solutions产品中存在加密问题漏洞。攻击者可利用该漏洞获取用户凭证。以下产品及版本受到影响：CODESYS Control for BeagleBone；CODESYS Control for emPC-A/iMX6；CODESYS Control for IOT2000；CODESYS Control for Linux；CODESYS Control for PFC100；CODESYS Control for PFC200；CODESYS Control for Raspberry Pi；CODESYS Control RTE V3；CODESYS Control RTE V3 (for Beckhoff CX)；CODESYS Control Win V3 (also part of the CODESYS Development System setup)；CODESYS V3 Simulation Runtime (part of the CODESYS Development System)；CODESYS Control V3 Runtime System Toolkit；CODESYS HMI V3。
solution:Upgrade codesys control_for_beaglebone_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_for_empc-a/imx6_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_for_iot2000_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_for_linux_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_for_pfc100_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_for_pfc200_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_rte_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_win_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys development_system to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys hmi_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys raspberry_pi to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys runtime_toolkit to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0)