3S-Smart Software Solutions GmbH CODESYS V3 Products

Risk Summary

Successful exploitation of these vulnerabilities could allow a remote attacker to disguise the source of malicious communication packets and also exploit a random values weakness affecting confidentiality and integrity of data stored on the device.

CVEs (2)

Remediations

• 3-S Smart Software Solutions GmbH has released a new version of the software that can be downloaded from:https://www.codesys.com/download/For more information, all public CODESYS advisories can be found at:https://www.codesys.com/security/security-reports.html3S-Smart Software Solutions GmbH recommends the following general defensive measures to reduce the risk of exploitation of these vulnerabilities:
• Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from outside
• Use firewalls to protect and separate the control system network from other networks
• Use VPN (virtual private networks) tunnels if remote access is required
• Activate and apply user management and password features
• Limit the access to both development and control system by physical means, operating system features, etc.
• Protect both development and control system by using up to date virus detecting solutions

Affected Vendors

Affected Products (20)

Affected Sectors

Critical Manufacturing