VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 20, 2019· Updated Jun 17, 2026

CVE-2019-19789

CVE-2019-19789

Description

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.

Affected products

7
  • Codesys/PLCWinNT2 versions
    cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*range: <2.4.7.54
    • (no CPE)range: <V2.4.7.54
  • Codesys/Runtime Toolkit
    cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*
    Range: <2.4.7.54
  • Codesys/Sp Realtime Nt2 versions
    cpe:2.3:a:codesys:sp_realtime_nt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:codesys:sp_realtime_nt:*:*:*:*:*:*:*:*range: <2.3.7.28
    • (no CPE)range: <V2.3.7.28
  • CODESYS/CODESYS SP Realtime NTdescription
  • Codesys/CODESYS V2 Runtime Toolkit 32 Bit fullllm-fuzzy
    Range: <V2.4.7.54

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.