CVE-2019-13538

3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. The issue also exists for source libraries, but 3S-Smart Software Solutions GmbH strongly recommends distributing compiled libraries only.

• CWE-79
• CWE-79

• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12940&token=7723e5ed99830656f487e218e73dce2de751102fVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-19-255-02Third Party Advisory, US Government Resource
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12940&token=7723e5ed99830656f487e218e73dce2de751102fVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-19-255-02Third Party Advisory, US Government Resource

Published

Sep 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13532CODESYS V3 web server, all versions prior to 3.5.14.10, allo…7.5
• CVE-2019-13533In Omron PLC CJ series, all versions, and Omron PLC CS serie…8.1
• CVE-2019-13534Philips IntelliVue WLAN, portable patient monitors, WLAN Ver…7.2
• CVE-2019-13535In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) vers…4.6
• CVE-2019-13536Delta Electronics TPEditor, Versions 1.94 and prior. Multipl…7.8
• CVE-2019-13537The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCAD…7.5
• CVE-2019-13539Medtronic Valleylab Exchange Client version 3.4 and below, V…7.8
• CVE-2019-1354A remote code execution vulnerability exists when Git for Vi…8.8
• CVE-2019-13540Delta Electronics TPEditor, Versions 1.94 and prior. Multipl…7.8
• CVE-2019-13541In Horner Automation Cscape 9.90 and prior, an improper inpu…7.8
• CVE-2019-135423S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, a…6.5
• CVE-2019-13543Medtronic Valleylab Exchange Client version 3.4 and below, V…7.5