CVE-2020-7052: Codesys Control For Beaglebone

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.

Affected products

• Codesys Control For Beaglebone: before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Control For Empc-a/imx6: before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Control For IOT2000: before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Control For Linux: before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Control For PFC100: before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Control For PFC200: before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Control For Plcnext: before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Control For Raspberry Pi: before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Control Rte: from 3.5.8.60, before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Control Runtime System Toolkit: from 3.0, before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Control Win: from 3.5.9.80, before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Gateway: from 3.5.15.10, before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys HMI: from 3.5.10.0, before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Safety SIL2: from 3.0, before 3.5.15.30 (fixed in 3.5.15.30)
• Codesys Simulation Runtime: from 3.5.9.40, before 3.5.15.30 (fixed in 3.5.15.30)

Published 2020-01-24. Last modified 2026-06-17.