Read the docs
TI-2018-14204 Aliases CVE-2018-20026GHSA-mxhm-4cg3-5h2j

Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.

Priority LOW 39Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.

Why it matters now

EPSS 0.03353 88th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Kaspersky LabCODESYS V3 productsprior V3.5.14.0—No fix listedCNA
  • CODESYS V3 products VendorKaspersky Lab Affected prior V3.5.14.0 Fixed in — No fix listed CNA

CPE configurations NVD · 18

CPEVersionsRoleVendor
cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:control_runtime_toolkit:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
  • cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_runtime_toolkit:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
Show 8 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:opc_server:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:plchandler:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
cpe:2.3:a:codesys:targetvisu_sl:*:*:*:*:*:*:*:*3.0 to before 3.5.14.0VulnerableCODESYS
  • cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:opc_server:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:plchandler:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:targetvisu_sl:*:*:*:*:*:*:*:* Versions 3.0 to before 3.5.14.0 Vulnerable ·CODESYS

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-20026
  2. 2026-10-03 Alias added: GHSA-mxhm-4cg3-5h2j

References

Advisory 2

  • TI-2005-02970 Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal… CVSS 2.0HIGH 10.0
  • TI-2004-00844 McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS… CVSS 2.0HIGH 7.5
  • TI-2007-00432 Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky… CVSS 2.0HIGH 10.0
  • TI-2019-05946 Heap-based buffer overflow in Kaspersky Lab UltraVNC CVSS 3.1CRITICAL 9.8
  • TI-2019-05945 Heap-based buffer overflow in Kaspersky Lab UltraVNC CVSS 3.1CRITICAL 9.8
  • TI-2019-05943 Heap-based buffer overflow in Kaspersky Lab UltraVNC CVSS 3.1CRITICAL 9.8
See all 74 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences