CVE-2020-12068: Codesys Control For Beaglebone

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.

Affected products

• Codesys Control For Beaglebone: before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control For Empc-a/imx6: before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control For IOT2000: before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control For PFC100: before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control For PFC200: before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control For Plcnext: before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control For Raspberry Pi: before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control Rte: from 3.0, before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control Runtime System Toolkit: from 3.0, before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control Win: from 3.0, before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Development System: before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys HMI: from 3.0, before 3.5.16.0 (fixed in 3.5.16.0)

Published 2020-05-14. Last modified 2026-06-17.