Skip to content
Fencer Intel
high 7.5

CVE-2019-13532 json

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow…

published 7y ago modified 4mo ago also EUVD-2019-4987

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
3.5%
EPSS 3.5% chance of exploitation in 30 days, percentile 89%
public exploits
0
none known

Summary

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.

Patch / fix

  • codesys control_for_beaglebone 3.5.14.10
  • codesys control_for_empc-a/imx6 3.5.14.10
  • codesys control_for_iot2000 3.5.14.10
  • codesys control_for_linux 3.5.14.10
  • codesys control_for_pfc100 3.5.14.10
  • codesys control_for_pfc200 3.5.14.10
  • codesys control_for_raspberry_pi 3.5.14.10
  • codesys control_rte 3.5.12.80, 3.5.14.10
  • codesys control_runtime_system_toolkit 3.5.12.80
  • codesys control_win 3.5.14.10
  • codesys embedded_target_visu_toolkit 3.5.12.80
  • codesys hmi 3.5.12.80, 3.5.14.10
  • codesys remote_target_visu_toolkit 3.5.12.80

Is CVE-2019-13532 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-26-076-01 updated cvss 7.5

CODESYS in Festo Automation Suite

  • CODESYS Development System 3.0 Festo Automation Suite 2.8.0.137, Festo Automation Suite < 2.8.0.138 CODESYS Development System 3.5.16.10 Festo Automation Suite 2.8.0.137, Festo Automation Suite < 2.8.0.138
    affected: mitigation
  • Festo Automation Suite 2.8.0.138 CODESYS Development System 3.5.21.20
    fixed

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-25-273-04 updated cvss 7.5

Festo Controller CECC-S,-LK,-D Family Firmware (Update A)

  • Festo Firmware (R05 (17.06.2016) = 2.3.8.0) installed on Festo Hardware Controller CECC-D (All versions) Festo Firmware (R05 (17.06.2016) = 2.3.8.0) installed on Festo Hardware Controller CECC-S (All versions) Festo Firmware (R06 (11.10.2016) = 2.3.8.1) installed on Festo Hardware Controller CECC-LK (All versions) Festo Firmware (R06 (11.10.2016) = 2.3.8.1) installed on Festo Hardware Controller CECC-S (All versions)
    affected: mitigation “Festo has identified the following specific workarounds and mitigations users can apply to reduce risk:” certvde.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-19-255-01 updated cvss 7.5

3S-Smart Software Solutions GmbH CODESYS V3 Web Server

  • 3S-Smart Software Solutions GmbH CODESYS Control for BeagleBone containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS Control for emPC-A/iMX6 containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS Control for IOT2000 containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS Control for Linux containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS Control for PFC100 containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS Control for PFC200 containing the webserver CmpWebServer < 3.5.14.10
    +8 more products
    3S-Smart Software Solutions GmbH CODESYS Control for Raspberry Pi containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS Control RTE V3 (for Beckhoff CX) containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS Control RTE V3 containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS Control V3 Runtime System Toolkit containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS Control Win V3 (also part of the CODESYS Development System setup) containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS HMI V3 containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS V3 Embedded Target Visu Toolkit containing the webserver CmpWebServer < 3.5.14.10 3S-Smart Software Solutions GmbH CODESYS V3 Remote Target Visu Toolkit containing the webserver CmpWebServer < 3.5.14.10
    affected: mitigation “3S-Smart Software Solutions GmbH has released Versions 3.5.12.80, 3.5.14.10, and 3.5.15.0 to resolve the vulnerabilities for the affected CODESYS products.” codesys.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

3.47% chance of exploitation in the next 30 days, higher than 89% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • n/a CODESYS V3 web server

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.