CVE & CISA-KEV Catalog

CVE-2020-12069

HIGH
7.8
CVSS v3
NVD

Description

In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.

CWE-916

How to fix

Remediation Available
750-8100 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8101 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8102 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8202 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8203 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8204 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8206 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8207 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8210 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8211 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8212 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8213 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8214 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8215 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
750-8216 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
752-8303\/8000-0002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4201\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4202\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4203\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4204\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4205\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4205\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4206\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4206\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4301\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4302\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4303\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4304\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4305\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-4306\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-5204\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-5205\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-5206\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-5303\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-5304\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-5305\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-5306\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-6202\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-6203\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-6204\/8000-001 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-6301\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-6302\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-6303\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
762-6304\/8000-002 firmwareNVD
Affected:< 03.06.19(18)Fixed in:03.06.19(18)CVE-2020-12069derived from NVD
control for beagleboneNVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
control for empc-a\/imx6NVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
control for iot2000NVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
control for linuxNVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
control for pfc100NVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
control for pfc200NVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
control for plcnextNVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
control for raspberry piNVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
control rte v3NVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
control v3 runtime system toolkitNVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
control win v3NVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
hmi v3NVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD
pmcNVD
Affected:>= 3.0.0, < 3.5.17Fixed in:3.5.17CVE-2020-12069derived from NVD
v3 simulation runtimeNVD
Affected:< 3.5.16.0Fixed in:3.5.16.0CVE-2020-12069derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

0.16%probability of exploitation in 30 days
6thpercentile

Low risk: more likely to be exploited than 6% of all known CVEs.

References

Vendor Advisory1
Embed a live status badge for CVE-2020-12069
CVE-2020-12069 severity badge

Markdown

[![CVE-2020-12069](https://tridentstack.com/cve/badge/CVE-2020-12069.svg)](https://tridentstack.com/cve/CVE-2020-12069)

HTML

<a href="https://tridentstack.com/cve/CVE-2020-12069"><img src="https://tridentstack.com/cve/badge/CVE-2020-12069.svg" alt="CVE-2020-12069"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-05-05.