Codesys Control Win V3 vulnerabilities

1 vulnerability

Known vulnerabilities in Codesys Control Win V3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2020-12069codesyscodesys v3 containing the cmpusermgr+64
EPSS score
0.17%
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.