Read the docs
TI-2012-05032 Aliases CVE-2012-6068GHSA-hh9j-6v4h-23q7

3S CoDeSys Improper Access Control

Priority MEDIUM 50CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.

Summary

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.

Why it matters now

EPSS 0.05266 92nd percentileScored 2026-11-07
Fix Fixed CODESYS Control Runtime embedded (3S-Smart Software Solutions): 2.3.2.8CODESYS Control Runtime full (3S-Smart Software Solutions): 2.4.7.40+2 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
3S-Smart Software SolutionsCODESYS Control Runtime embeddedbefore 2.3.2.82.3.2.8Patch availableCNA
3S-Smart Software SolutionsCODESYS Control Runtime fullbefore 2.4.7.402.4.7.40Patch availableCNA
3S-Smart Software SolutionsCODESYS Control RTEbefore 2.3.7.172.3.7.17Patch availableCNA
FestoCECX-X-C1 Modular Master Controller with CoDeSysAll—No fix listedCNA
FestoCECX-X-M1 Modular Controller with CoDeSys and SoftMotionAll—No fix listedCNA
3S-Smart Software SolutionsCoDeSys—3.XPatch availableCNA
  • CODESYS Control Runtime embedded Vendor3S-Smart Software Solutions Affected before 2.3.2.8 Fixed in 2.3.2.8 Patch available CNA
  • CODESYS Control Runtime full Vendor3S-Smart Software Solutions Affected before 2.4.7.40 Fixed in 2.4.7.40 Patch available CNA
  • CODESYS Control RTE Vendor3S-Smart Software Solutions Affected before 2.3.7.17 Fixed in 2.3.7.17 Patch available CNA
  • CECX-X-C1 Modular Master Controller with CoDeSys VendorFesto Affected All Fixed in — No fix listed CNA
  • CECX-X-M1 Modular Controller with CoDeSys and SoftMotion VendorFesto Affected All Fixed in — No fix listed CNA
  • CoDeSys Vendor3S-Smart Software Solutions Affected — Fixed in 3.X Patch available CNA

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.8:*:*:*:*:*:*:*2.3.9.8Vulnerable3s-software
cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.35:*:*:*:*:*:*:*2.3.9.35Vulnerable3s-software
cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.36:*:*:*:*:*:*:*2.3.9.36Vulnerable3s-software
cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.37:*:*:*:*:*:*:*2.3.9.37Vulnerable3s-software
cpe:2.3:a:3s-software:codesys_runtime_system:2.4.0:*:*:*:*:*:*:*2.4.0Vulnerable3s-software
  • cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.8:*:*:*:*:*:*:* Versions 2.3.9.8 Vulnerable ·3s-software
  • cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.35:*:*:*:*:*:*:* Versions 2.3.9.35 Vulnerable ·3s-software
  • cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.36:*:*:*:*:*:*:* Versions 2.3.9.36 Vulnerable ·3s-software
  • cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.37:*:*:*:*:*:*:* Versions 2.3.9.37 Vulnerable ·3s-software
  • cpe:2.3:a:3s-software:codesys_runtime_system:2.4.0:*:*:*:*:*:*:* Versions 2.4.0 Vulnerable ·3s-software

Remediation

  • Fix · CNA CODESYS Control Runtime embedded (3S-Smart Software Solutions) Fixed in 2.3.2.8
  • Fix · CNA CODESYS Control Runtime full (3S-Smart Software Solutions) Fixed in 2.4.7.40
  • Fix · CNA CODESYS Control RTE (3S-Smart Software Solutions) Fixed in 2.3.7.17
  • Fix · CNA CoDeSys (3S-Smart Software Solutions) Fixed in 3.X

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    3S-Smart Software Solutions CODESYS Control RTE, CODESYS Control Runtime embedded, CODESYS Control Runtime full 2.3.2.8, 2.3.7.17, 2.4.7.40

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2012-05033 3S CoDeSys Relative Path TraversalPriority MEDIUM 48
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-6068
  2. 2026-10-03 Alias added: GHSA-hh9j-6v4h-23q7

References

Advisory 1

Other 4

  • TI-2012-05033 3S CoDeSys Relative Path Traversal CVSS 3.1CRITICAL 10.0
  • TI-2015-05446 3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences