[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fj5Jek9UFMP5BNEhxxd2aNCtDKxrkYgNM9KWIpLXYGsA":3,"g5a-risk:CVE-2019-9012":156},{"success":4,"data":5,"meta":154},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":36,"references":74,"referencesCount":86,"weaknesses":87,"weaknessesCount":96,"isActivelyExploited":97,"cisaInfo":26,"otxData":26,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":152,"notableEvents":153},"CVE-2019-9012","What is CVE-2019-9012?","An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS products and may result in a denial-of-service condition. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A\u002FiMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control V3 Runtime System Toolkit, CODESYS Gateway V3, CODESYS V3 Development System.","An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS pr...","2019-08-15T18:15:23.477","2023-05-16T11:15:49.487",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:C","COMPLETE",7.8,10,6.9,0.01752,[38,38,38,38,38,38,38],"High",[42,47,50,53,56,59,62,65,68,71],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"codesys","control_for_beaglebone_sl","*","cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":45,"criteria":49,"vulnerable":4},"control_for_empc-a\\\u002Fimx6_sl","cpe:2.3:a:codesys:control_for_empc-a\\\u002Fimx6_sl:*:*:*:*:*:*:*:*",{"vendor":43,"product":51,"version":45,"criteria":52,"vulnerable":4},"control_for_iot2000_sl","cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",{"vendor":43,"product":54,"version":45,"criteria":55,"vulnerable":4},"control_for_linux_sl","cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",{"vendor":43,"product":57,"version":45,"criteria":58,"vulnerable":4},"control_for_pfc100_sl","cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",{"vendor":43,"product":60,"version":45,"criteria":61,"vulnerable":4},"control_for_pfc200_sl","cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",{"vendor":43,"product":63,"version":45,"criteria":64,"vulnerable":4},"control_for_raspberry_pi_sl","cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",{"vendor":43,"product":66,"version":45,"criteria":67,"vulnerable":4},"control_runtime_toolkit","cpe:2.3:a:codesys:control_runtime_toolkit:*:*:*:*:*:*:*:*",{"vendor":43,"product":69,"version":45,"criteria":70,"vulnerable":4},"development_system","cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*",{"vendor":43,"product":72,"version":45,"criteria":73,"vulnerable":4},"gateway","cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*",[75,80],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fcustomers.codesys.com\u002Findex.php?eID=dumpFile&t=f&f=12938&token=b9eb30f53246dc57b2e7cb302356a05547148fa2&download=","Codesys",[79],"Vendor Advisory",{"url":81,"source":82,"tags":83},"https:\u002F\u002Fwww.us-cert.gov\u002Fics\u002Fadvisories\u002Ficsa-19-213-03","Us-cert",[84,85],"Third Party Advisory","US Government Resource",2,[88],{"id":89,"name":90,"description":91,"extendedDescription":92,"status":93,"abstraction":94,"structure":95},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.","Code frequently has to work with limited resources, so programmers must be careful to ensure that resources are not consumed too quickly, or too easily.  Without use of quotas, resource limits, or other protection mechanisms, it can be easy for an attacker to consume many resources by rapidly making many requests, or causing larger resources to be used than is needed. When too many resources are allocated, or if a single resource is too large, then it can prevent the code from working correctly, possibly leading to a denial of service.","Incomplete","Base","Simple",1,false,[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2019-9012? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-9012, a high severity cyber security vulnerability from 2019. An issue was discovered in 3S-Smart CODESYS V3 products. A c...","CVE-2019-9012, CVE-2019-9012 vulnerability, CVE-2019-9012 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, codesys security, control_for_beaglebone_sl vulnerability, control_for_empc-a\\\u002Fimx6_sl vulnerability, control_for_iot2000_sl vulnerability, control_for_linux_sl vulnerability, control_for_pfc100_sl vulnerability","\u002Fwhat-is\u002Fcve-2019-9012",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-9012","Cybersecurity","CVE-2019-9012, CVE-2019-9012 vulnerability, CVE-2019-9012 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125],{"Operator":26,"Negate":26,"Nodes":126},[127],{"Operator":128,"Negate":26,"CPEMatch":129},"OR",[130,134,136,138,140,142,144,146,148,150],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"B4E9C6D8-9CC6-4F07-BF9E-8FBA03198AA0","3.0","3.5.14.20",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"DB94C8E2-B642-43D2-9396-46F5AB5E66FC",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"6BBF71DD-DCB0-441A-B122-AC9EAD7C1D67",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"C50DC2EE-102F-4B47-AF0A-25D2D10FDC1E",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":141,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"C9D5F04F-C033-42E5-A072-137EF5C54DF7",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":143,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"08E06CDD-4C2A-457B-B456-BB377481C52A",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":145,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"5424CD6A-42C6-4744-B182-739CC379EA79",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":147,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"B19C74A7-08D3-40AC-BF00-87EF5DDA9A0C",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":149,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"F9995DEF-A6ED-4B62-BFE7-F85DF8E56315",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":151,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"92CF05A0-31F0-49BB-9299-E9210D954682",[],[],{"lastModified":11,"cacheTime":155,"version":32},1792389434521,{"score":157,"band":158,"action":159,"scoredAt":160},46,"Medium","Plan remediation","2026-10-16T06:46:43.170903+00:00"]