Vulnerabilities

CVE-2019-13538

June 9, 2021

3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. The issue also exists for source libraries, but 3S-Smart Software Solutions GmbH strongly recommends distributing compiled libraries only.

Summary:

Reference Links(if available):

https://www.us-cert.gov/ics/advisories/icsa-19-255-02

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12940&token=7723e5ed99830656f487e218e73dce2de751102f

CVSS Score (if available)

v2: / MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

v3: / HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Links to Exploits(if available)

Tags: CVE, CVE-2019-13538, MISC, Third Party Advisory, vulnerability

CVE-2019-13538

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

[FUNKSEC] – Ransomware Victim: 10M israeli data for sell

[FUNKSEC] – Ransomware Victim: asiapacfish[.]org

[FOG] – Ransomware Victim: Gallade Chemical (galladechem[.]com)

[AKIRA] – Ransomware Victim: Billet Precision

[FOG] – Ransomware Victim: Industria e Comercio Jolitex Ltda (jolitex[.]com)

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

[FUNKSEC] – Ransomware Victim: 10M israeli data for sell

[FUNKSEC] – Ransomware Victim: asiapacfish[.]org

[FOG] – Ransomware Victim: Gallade Chemical (galladechem[.]com)

[AKIRA] – Ransomware Victim: Billet Precision

[FOG] – Ransomware Victim: Industria e Comercio Jolitex Ltda (jolitex[.]com)