CVE-2019-9012

An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS products and may result in a denial-of-service condition. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control V3 Runtime System Toolkit, CODESYS Gateway V3, CODESYS V3 Development System.

• CWE-770

• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12938&token=b9eb30f53246dc57b2e7cb302356a05547148fa2&download=Vendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-19-213-03Third Party Advisory, US Government Resource
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12938&token=b9eb30f53246dc57b2e7cb302356a05547148fa2&download=Vendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-19-213-03Third Party Advisory, US Government Resource

Published

Aug 15, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9004In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/…
• CVE-2019-9005The Cprime Power Scripts app before 4.0.14 for Atlassian Jir…
• CVE-2019-9008An issue was discovered in 3S-Smart CODESYS V3 through 3.5.1…8.8
• CVE-2019-9009An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 …7.5
• CVE-2019-9010An issue was discovered in 3S-Smart CODESYS V3 products. The…9.8
• CVE-2019-9011In Pilz PMC programming tool 3.x before 3.5.17 (based on COD…5.3
• CVE-2019-9013An issue was discovered in 3S-Smart CODESYS V3 products. The…8.8
• CVE-2019-9015A Path Traversal vulnerability was discovered in MOPCMS thro…
• CVE-2019-9016An XSS vulnerability was discovered in MOPCMS through 2018-1…
• CVE-2019-9017DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 ha…7.5
• CVE-2019-9019The British Airways Entertainment System, as installed on Bo…
• CVE-2019-9020An issue was discovered in PHP before 5.6.40, 7.x before 7.1…