CVE-2019-18858: Codesys Control For Beaglebone

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.

Affected products

• Codesys Control For Beaglebone: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Control For Empc-a/imx6: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Control For IOT2000: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Control For Linux: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Control For PFC100: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Control For PFC200: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Control For Plcnext: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Control For Raspberry Pi: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Control Rte: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Control Runtime System Toolkit: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Control Win: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Embedded Target Visu Toolkit: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys HMI: before 3.5.15.20 (fixed in 3.5.15.20)
• Codesys Remote Target Visu Toolkit: before 3.5.15.20 (fixed in 3.5.15.20)

Published 2019-11-20. Last modified 2026-06-17.