CVE-2019-19789 Information

Description

3S-Smart CODESYS SP Realtime NT before V2.3.7.28 CODESYS Runtime Toolkit 32 bit full before V2.4.7.54 and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Reference

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12946&token=edd5d8e821edaf3189d36bb1cac1aa1bfc42351f&download= https://www.codesys.com

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

6.5