3S-Smart Software Solutions GmbH has new software to mitigate an improper access control vulnerability in its CODESYS Control V3 products, according to NCCIC.
Successful exploitation of this remotely exploitable vulnerability, discovered by Yury Serdyuk of Kaspersky Lab, could allow unauthorized access and exfiltration of sensitive data including user credentials.
3S-Smart Software Solutions GmbH reports the vulnerability affects all variants of CODESYS Control V3 products containing the CmpSecureChannel or CmpUserMgr components prior to Version 188.8.131.52 of the following products, regardless of the CPU type or operating system:
• Control for BeagleBone
• CODESYS Control for BeagleBone
• CODESYS Control for emPC-A/iMX6
• CODESYS Control for IOT2000
• CODESYS Control for Linux
• CODESYS Control for PFC100
• CODESYS Control for PFC200
• CODESYS Control for Raspberry Pi
• CODESYS Control RTE V3
• CODESYS Control RTE V3 (for Beckhoff CX)
• CODESYS Control Win V3 (also part of the CODESYS setup)
• CODESYS V3 Simulation Runtime (part of the CODESYS Development System)
• CODESYS Control V3 Runtime System Toolkit
• CODESYS HMI V3
User access management and communication encryption is not enabled by default, which could allow an attacker access to the device and sensitive information, including user credentials.
CVE-2018-10612 is the case number assigned to this vulnerability, which has a CVSS v3 base score of 9.8.
The product sees use in the critical manufacturing and energy sectors. It also sees action on a global basis.
No known public exploits specifically target this vulnerability. However, an attacker with low skill level could leverage the vulnerability.
Germany-based 3S-Smart Software Solutions GmbH recommends activating the CODESYS Control online user management and encryption of the online communication.
In addition, 3S-Smart Software Solutions GmbH recommends updating to the latest software Version 184.108.40.206 or newer.
3S-Smart Software Solutions GmbH also recommends updating the CODESYS Development System to the latest version.
Click here for more information on all public CODESYS advisories.
In general, 3S-Smart Software Solutions GmbH recommends, as part of the mitigation strategy, the following defensive measures to reduce the risk of exploitation of this vulnerability:
• Use controllers and devices only in a protected environment to minimize network exposure and ensure controllers are not accessible from outside
• Use firewalls to protect and separate the control system network from other networks
• Use VPN (Virtual Private Networks) tunnels if remote access is required
• Activate and apply user management and password features
• Limit the access to both development and control system by physical means, operating system features, etc.
• Protect both development and control system by using up-to-date virus detecting solutions
For more information and general recommendations for protecting machines and plants, see also the CODESYS Security Whitepaper.