CVE-2019-9009: Codesys Control For Beaglebone

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.

Affected products

• Codesys Control For Beaglebone: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Control For Empc-a/imx6: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Control For IOT2000: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Control For PFC100: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Control For PFC200: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Control For Raspberry Pi: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Control Rte: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Control Win: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Gateway: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys HMI: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Linux: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Runtime System Toolkit: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Safety SIL2: before 3.5.15.0 (fixed in 3.5.15.0)
• Codesys Simulation Runtime: before 3.5.15.0 (fixed in 3.5.15.0)

Published 2019-09-17. Last modified 2026-06-17.