[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzxuQwtVnNdboVf7N4xtZhhVDpRv8ekkycnDajWtbOc8":3,"g5a-risk:CVE-2020-15806":198},{"success":4,"data":5,"meta":196},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":25,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":92,"references":93,"referencesCount":109,"weaknesses":110,"weaknessesCount":119,"isActivelyExploited":120,"cisaInfo":25,"otxData":25,"relatedBlogPosts":121,"seoMetadata":122,"configurations":147,"relatedVendorCves":194,"notableEvents":195},"CVE-2020-15806","What is CVE-2020-15806?","CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.","2020-07-22T19:15:12.317","2021-07-21T11:39:23.747",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[29],{"Source":16,"Type":17,"CVSSData":30,"BaseSeverity":35,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":33,"BaseScore":34,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.02047,[38,38,38,38,38,38,38],"High",[42,47,50,53,56,59,62,65,68,71,74,77,80,83,86,89],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"codesys","control_for_beaglebone","*","cpe:2.3:a:codesys:control_for_beaglebone:*:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":45,"criteria":49,"vulnerable":4},"control_for_empc-a\\\u002Fimx6","cpe:2.3:a:codesys:control_for_empc-a\\\u002Fimx6:*:*:*:*:*:*:*:*",{"vendor":43,"product":51,"version":45,"criteria":52,"vulnerable":4},"control_for_iot2000","cpe:2.3:a:codesys:control_for_iot2000:*:*:*:*:*:*:*:*",{"vendor":43,"product":54,"version":45,"criteria":55,"vulnerable":4},"control_for_linux","cpe:2.3:a:codesys:control_for_linux:*:*:*:*:*:*:*:*",{"vendor":43,"product":57,"version":45,"criteria":58,"vulnerable":4},"control_for_pfc100","cpe:2.3:a:codesys:control_for_pfc100:*:*:*:*:*:*:*:*",{"vendor":43,"product":60,"version":45,"criteria":61,"vulnerable":4},"control_for_pfc200","cpe:2.3:a:codesys:control_for_pfc200:*:*:*:*:*:*:*:*",{"vendor":43,"product":63,"version":45,"criteria":64,"vulnerable":4},"control_for_plcnext","cpe:2.3:a:codesys:control_for_plcnext:*:*:*:*:*:*:*:*",{"vendor":43,"product":66,"version":45,"criteria":67,"vulnerable":4},"control_for_raspberry_pi","cpe:2.3:a:codesys:control_for_raspberry_pi:*:*:*:*:*:*:*:*",{"vendor":43,"product":69,"version":45,"criteria":70,"vulnerable":4},"control_for_wago_touch_panels_600","cpe:2.3:a:codesys:control_for_wago_touch_panels_600:*:*:*:*:*:*:*:*",{"vendor":43,"product":72,"version":45,"criteria":73,"vulnerable":4},"control_rte","cpe:2.3:a:codesys:control_rte:*:*:*:*:*:-:*:*",{"vendor":43,"product":75,"version":45,"criteria":76,"vulnerable":4},"control_runtime_system_toolkit","cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",{"vendor":43,"product":78,"version":45,"criteria":79,"vulnerable":4},"control_win","cpe:2.3:a:codesys:control_win:*:*:*:*:*:*:*:*",{"vendor":43,"product":81,"version":45,"criteria":82,"vulnerable":4},"embedded_target_visu_toolkit","cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:*",{"vendor":43,"product":84,"version":45,"criteria":85,"vulnerable":4},"hmi","cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:*",{"vendor":43,"product":87,"version":45,"criteria":88,"vulnerable":4},"remote_target_visu_toolkit","cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*",{"vendor":43,"product":90,"version":45,"criteria":91,"vulnerable":4},"simulation_runtime","cpe:2.3:a:codesys:simulation_runtime:*:*:*:*:*:*:*:*",16,[94,100,103],{"url":95,"source":96,"tags":97},"https:\u002F\u002Fcustomers.codesys.com\u002Findex.php?eID=dumpFile&t=f&f=13199&token=3e283c3e73fed61f7c181a7fa1169477efaf0c58&download=","Codesys",[98,99],"Mitigation","Vendor Advisory",{"url":101,"source":96,"tags":102},"https:\u002F\u002Fwww.codesys.com",[99],{"url":104,"source":105,"tags":106},"https:\u002F\u002Fwww.tenable.com\u002Fsecurity\u002Fresearch\u002Ftra-2020-46","Tenable",[107,108],"Exploit","Third Party Advisory",3,[111],{"id":112,"name":113,"description":114,"extendedDescription":115,"status":116,"abstraction":117,"structure":118},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.","This is often triggered by improper handling of malformed data or unexpectedly interrupted sessions.  In some languages, developers are responsible for tracking memory allocation and releasing the memory.  If there are no more pointers or references to the memory, then it can no longer be tracked and identified for release.","Draft","Variant","Simple",1,false,[],{"title":123,"metaDescription":124,"keywords":125,"canonicalUrl":126,"structuredData":127},"What is CVE-2020-15806? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-15806, a high severity cyber security vulnerability from 2020. CODESYS Control runtime system before 3.5.16.10 allows Unco...","CVE-2020-15806, CVE-2020-15806 vulnerability, CVE-2020-15806 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, codesys security, control_for_beaglebone vulnerability, control_for_empc-a\\\u002Fimx6 vulnerability, control_for_iot2000 vulnerability, control_for_linux vulnerability, control_for_pfc100 vulnerability","\u002Fwhat-is\u002Fcve-2020-15806",{"@context":128,"@type":129,"headline":123,"description":124,"datePublished":9,"dateModified":10,"author":130,"publisher":134,"about":138,"mainEntityOfPage":142,"articleSection":145,"keywords":146},"https:\u002F\u002Fschema.org","TechArticle",{"@type":131,"name":132,"url":133},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":131,"name":132,"url":133,"logo":135},{"@type":136,"url":137},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":139,"name":6,"description":140,"additionalType":141},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":143,"@id":144},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-15806","Cybersecurity","CVE-2020-15806, CVE-2020-15806 vulnerability, CVE-2020-15806 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[148],{"Operator":25,"Negate":25,"Nodes":149},[150],{"Operator":151,"Negate":25,"CPEMatch":152},"OR",[153,156,158,160,162,164,166,168,170,172,175,178,181,184,186,189,191],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":154,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":155,"VersionEndIncluding":25},"4AE57E7D-63C1-470F-A95B-B9DA3A586E04","3.5.16.10",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":157,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":155,"VersionEndIncluding":25},"7B5F06D0-5224-4D76-A856-9AB57BF87D59",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":159,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":155,"VersionEndIncluding":25},"CB388FBB-8512-4FCE-A754-A82239A911B9",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":161,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":155,"VersionEndIncluding":25},"41722BB1-40F6-4D12-9A00-156D04C92097",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":163,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":155,"VersionEndIncluding":25},"5E56A636-9DC3-411D-B287-308A2BAC759D",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":165,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":155,"VersionEndIncluding":25},"82614FBA-2612-4FA4-988B-D67E80B5DDA7",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":167,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":155,"VersionEndIncluding":25},"387FB2B8-5435-4054-94A4-0AE60A42FB0C",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":169,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":155,"VersionEndIncluding":25},"4B7517E0-0D9C-4AA8-B8A9-7F1420FE4616",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":171,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":155,"VersionEndIncluding":25},"1C80CDF5-5264-41CD-A475-E46C3E941F4A",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":173,"VersionStartExcluding":25,"VersionStartIncluding":174,"VersionEndExcluding":155,"VersionEndIncluding":25},"6097C902-F24A-4408-8E2C-C90F0AB67E13","3.5.8.60",{"Vulnerable":4,"Criteria":176,"MatchCriteriaID":177,"VersionStartExcluding":25,"VersionStartIncluding":174,"VersionEndExcluding":155,"VersionEndIncluding":25},"cpe:2.3:a:codesys:control_rte:*:*:*:*:*:beckhoff_cx:*:*","2DDE8129-4CEE-440B-B0D1-29BB93D1ACE8",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":179,"VersionStartExcluding":25,"VersionStartIncluding":180,"VersionEndExcluding":155,"VersionEndIncluding":25},"6CF52B1D-7AF9-4DAD-A8E7-6CB7CC060E08","3.0",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":182,"VersionStartExcluding":25,"VersionStartIncluding":183,"VersionEndExcluding":155,"VersionEndIncluding":25},"E86A4C83-B82D-4D2F-96C6-C8F66B7AB947","3.5.9.80",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":185,"VersionStartExcluding":25,"VersionStartIncluding":180,"VersionEndExcluding":155,"VersionEndIncluding":25},"890104AC-5CB4-466D-9CC0-F39E8B24BD9D",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":187,"VersionStartExcluding":25,"VersionStartIncluding":188,"VersionEndExcluding":155,"VersionEndIncluding":25},"7CE9850A-47B3-4C37-90C0-FF9516DF025F","3.5.10.0",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":190,"VersionStartExcluding":25,"VersionStartIncluding":180,"VersionEndExcluding":155,"VersionEndIncluding":25},"31C2638C-D4C4-4C71-A873-E7836802E6FE",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":192,"VersionStartExcluding":25,"VersionStartIncluding":193,"VersionEndExcluding":155,"VersionEndIncluding":25},"9A09DAE1-678B-49A2-88CE-CFF4F514673E","3.5.9.40",[],[],{"lastModified":10,"cacheTime":197,"version":31},1792389570358,{"score":199,"band":200,"action":201,"scoredAt":202},48,"Medium","Plan remediation","2026-10-16T06:49:03.345506+00:00"]