CVE编号
CVE-2018-20026利用情况
暂无补丁情况
N/A披露时间
2019-02-20漏洞描述
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接 |
|
|---|---|
| http://www.securityfocus.com/bid/106251 | |
| https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert... | |
| https://ics-cert.us-cert.gov/advisories/ICSA-18-352-04 |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_for_beaglebone_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_for_empc-a/imx6_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_for_iot2000_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_for_linux_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_for_pfc100_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_for_pfc200_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_for_raspberry_pi_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_rte_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_rte_sl_(for_beckhoff_cx) | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_runtime_toolkit | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | control_win_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | development_system_v3 | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | gateway | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | hmi_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | opc_server | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | plchandler | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | safety_sil2 | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
| 运行在以下环境 | |||||||||
| 应用 | codesys | targetvisu_sl | * |
From (including) 3.0 |
Up to (excluding) 3.5.14.0 |
||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 无
- 保密性 高
- 完整性 无
还没有评论，来说两句吧...