CVE-2019-18858

29

FAUCET Score

CVE-2019-18858 is a critical buffer overflow vulnerability affecting the CODESYS 3 web server in versions prior to 3.5.15.20, specifically when distributed with CODESYS Control runtime systems. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network without authentication and can lead to complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, its high severity and the mention in a recent advisory highlight its potential risk.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 3.5.15.20CPE matchmatch criteria	cpe:2.3:a:codesys:control_for_beaglebone::::::::
		< 3.5.15.20CPE matchmatch criteria	cpe:2.3:a:codesys:control_for_empc-a\/imx6::::::::
		< 3.5.15.20CPE matchmatch criteria	cpe:2.3:a:codesys:control_for_iot2000::::::::
		< 3.5.15.20CPE matchmatch criteria	cpe:2.3:a:codesys:control_for_linux::::::::
		< 3.5.15.20CPE matchmatch criteria	cpe:2.3:a:codesys:control_for_pfc100::::::::

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

1.96%

Probability of exploitation in next 30 days

EPSS Percentile

78.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-24

Model: v2026.06.15

This CVE's current EPSS score of 0.0196 is in the 67th percentile among its peer group of 36,821 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (11)

amazonvendor investigatingvia llm_extracted

apollographqlvendor investigatingvia llm_extracted

aristavendor investigatingvia llm_extracted

dfinityvendor investigatingvia llm_extracted

fleetdmvendor investigatingvia llm_extracted

mathworksvendor investigatingvia llm_extracted

naturalintelligencevendor investigatingvia llm_extracted

netgearvendor investigatingvia llm_extracted

opencartvendor investigatingvia llm_extracted

payloadcmsvendor investigatingvia llm_extracted

safarivendor investigatingvia llm_extracted

Vendor Advisories (11)

fleetdmllm-fleetdm-dfa6928b76ca88dbCRITICAL

Multiple Vulnerabilities in 3S CODESYS Runtime in Rexroth PRC7000

mathworksllm-mathworks-ec6ff689b971de03CRITICAL

Multiple Vulnerabilities in 3S CODESYS Runtime in Rexroth PRC7000

amazonllm-amazon-e5068a99de6e4862CRITICAL

Multiple Vulnerabilities in 3S CODESYS Runtime in Rexroth PRC7000

apollographqlllm-apollographql-cd81770455aec26eCRITICAL

Multiple Vulnerabilities in 3S CODESYS Runtime in Rexroth PRC7000

dfinityllm-dfinity-0f95073f58c8726cCRITICAL

Multiple Vulnerabilities in 3S CODESYS Runtime in Rexroth PRC7000

opencartllm-opencart-fa39eda627f28738CRITICAL

CODESYS V3 Unauthenticated Remote Heap Buffer Overflow

netgearllm-netgear-83541590c8cd84b1CRITICAL

CODESYS V3 Unauthenticated Remote Heap Buffer Overflow

aristallm-arista-f841ad752fdeb9bdCRITICAL

CODESYS V3 Unauthenticated Remote Heap Buffer Overflow

payloadcmsllm-payloadcms-02def9fad3fd949eCRITICAL

CODESYS V3 Unauthenticated Remote Heap Buffer Overflow

safarillm-safari-81c42d4bd995e74aCRITICAL

CODESYS V3 Unauthenticated Remote Heap Buffer Overflow

naturalintelligencellm-naturalintelligence-a3580f681f9e5582CRITICAL

CODESYS V3 Unauthenticated Remote Heap Buffer Overflow

References

customers.codesys.com / fileadmin/data/customers/security/2019/Advisory2019-10_CDS-68341.pdf

Vendor Advisory

tenable.com / security/research/tra-2019-48

ExploitThird Party Advisory