CVE-2020-15806: Codesys Control For Beaglebone

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.

Affected products

• Codesys Control For Beaglebone: before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control For Empc-a/imx6: before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control For IOT2000: before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control For Linux: before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control For PFC100: before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control For PFC200: before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control For Plcnext: before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control For Raspberry Pi: before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control For Wago Touch Panels 600: before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control Rte: from 3.5.8.60, before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control Runtime System Toolkit: from 3.0, before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Control Win: from 3.5.9.80, before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Embedded Target Visu Toolkit: from 3.0, before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys HMI: from 3.5.10.0, before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Remote Target Visu Toolkit: from 3.0, before 3.5.16.10 (fixed in 3.5.16.10)
• Codesys Simulation Runtime: from 3.5.9.40, before 3.5.16.10 (fixed in 3.5.16.10)

Published 2020-07-22. Last modified 2026-06-17.