CVE-2018-10612

Description

In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which could allow an attacker access to the device and sensitive information, including user credentials.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.235

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-10612,CVE-2018-20025,CVE-2018-20026 are affected in CODESYS Control RTE (SL) 3.5.13.40	Windows
Vulnerabilities CVE-2018-10612,CVE-2018-20025,CVE-2018-20026 are affected in CODESYS Control Win (SL) 3.5.13.40	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234