CVE Vulnerabilities

CVE-2019-19789

NULL Pointer Dereference

Published: Dec 20, 2019 | Modified: Jan 03, 2020
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Plcwinnt Codesys * 2.4.7.54 (excluding)
Runtime_toolkit Codesys * 2.4.7.54 (excluding)
Sp_realtime_nt Codesys * 2.3.7.28 (excluding)

Potential Mitigations

References