synced JUST NOW
01 Record

CVE-2020-7052

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.

UnratedPUBLISHEDCNA: mitre
CNA base scoreUnratedNo CNA CVSS vector

02 Description

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
1.88% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 79.2% of scored records. A rank, not a probability.
NVD base score
6.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status
Modified. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2020-01-24 19:31Z6 YR AGO
Last updated
2024-08-04 09:18Z2 YR AGO
Reserved
2020-01-14
Assigning CNA
mitre
Record state
PUBLISHED
Severity
Not rated by the issuing CNA
CNA CVSS vector
Not published by the issuing CNA
Weaknesses
  • CWE-770Allocation of Resources Without Limits or ThrottlingBase
Data version
5.1
Document digest
571f60bcfc9be7cf9be37ef18392017a97420d1dd2482cdbb71c2504bf70cd81

05 Affected products

VendorProductVersionsPlatforms
codesyscontrol_for_beagleboneNot specified—
codesyscontrol_for_empc-a/imx6Not specified—
codesyscontrol_for_iot2000Not specified—
codesyscontrol_for_linuxNot specified—
codesyscontrol_for_pfc100Not specified—
codesyscontrol_for_pfc200Not specified—
codesyscontrol_for_plcnextNot specified—
codesyscontrol_for_raspberry_piNot specified—
codesyscontrol_rteNot specified—
codesyscontrol_runtime_system_toolkitNot specified—
codesyscontrol_winNot specified—
codesysgatewayNot specified—
codesyshmiNot specified—
codesyssafety_sil2Not specified—
codesyssimulation_runtimeNot specified—

06 References