Read the docs
TI-2012-05033 Aliases CVE-2012-6069GHSA-6q9j-3828-rfxj

3S CoDeSys Relative Path Traversal

Priority MEDIUM 48CWE-23Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacker to affect the availability, integrity, and confidentiality of the device.

Why it matters now

EPSS 0.02637 85th percentileScored 2026-11-07
Fix Fixed CODESYS Control Runtime embedded (3S-Smart Software Solutions): 2.3.2.8CODESYS Control Runtime full (3S-Smart Software Solutions): 2.4.7.40+2 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
3S-Smart Software SolutionsCODESYS Control Runtime embeddedbefore 2.3.2.82.3.2.8Patch availableCNA
3S-Smart Software SolutionsCODESYS Control Runtime fullbefore 2.4.7.402.4.7.40Patch availableCNA
3S-Smart Software SolutionsCODESYS Control RTEbefore 2.3.7.172.3.7.17Patch availableCNA
FestoCECX-X-C1 Modular Master Controller with CoDeSysAll—No fix listedCNA
FestoCECX-X-M1 Modular Controller with CoDeSys and SoftMotionAll—No fix listedCNA
3S-Smart Software SolutionsCoDeSys—3.XPatch availableCNA
  • CODESYS Control Runtime embedded Vendor3S-Smart Software Solutions Affected before 2.3.2.8 Fixed in 2.3.2.8 Patch available CNA
  • CODESYS Control Runtime full Vendor3S-Smart Software Solutions Affected before 2.4.7.40 Fixed in 2.4.7.40 Patch available CNA
  • CODESYS Control RTE Vendor3S-Smart Software Solutions Affected before 2.3.7.17 Fixed in 2.3.7.17 Patch available CNA
  • CECX-X-C1 Modular Master Controller with CoDeSys VendorFesto Affected All Fixed in — No fix listed CNA
  • CECX-X-M1 Modular Controller with CoDeSys and SoftMotion VendorFesto Affected All Fixed in — No fix listed CNA
  • CoDeSys Vendor3S-Smart Software Solutions Affected — Fixed in 3.X Patch available CNA

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:3s-software:codesys_runtime_system:2.4.0:*:*:*:*:*:*:*2.4.0Vulnerable3s-software
cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.8:*:*:*:*:*:*:*2.3.9.8Vulnerable3s-software
cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.35:*:*:*:*:*:*:*2.3.9.35Vulnerable3s-software
cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.36:*:*:*:*:*:*:*2.3.9.36Vulnerable3s-software
cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.37:*:*:*:*:*:*:*2.3.9.37Vulnerable3s-software
  • cpe:2.3:a:3s-software:codesys_runtime_system:2.4.0:*:*:*:*:*:*:* Versions 2.4.0 Vulnerable ·3s-software
  • cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.8:*:*:*:*:*:*:* Versions 2.3.9.8 Vulnerable ·3s-software
  • cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.35:*:*:*:*:*:*:* Versions 2.3.9.35 Vulnerable ·3s-software
  • cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.36:*:*:*:*:*:*:* Versions 2.3.9.36 Vulnerable ·3s-software
  • cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.37:*:*:*:*:*:*:* Versions 2.3.9.37 Vulnerable ·3s-software

Remediation

  • Fix · CNA CODESYS Control Runtime embedded (3S-Smart Software Solutions) Fixed in 2.3.2.8
  • Fix · CNA CODESYS Control Runtime full (3S-Smart Software Solutions) Fixed in 2.4.7.40
  • Fix · CNA CODESYS Control RTE (3S-Smart Software Solutions) Fixed in 2.3.7.17
  • Fix · CNA CoDeSys (3S-Smart Software Solutions) Fixed in 3.X

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    3S-Smart Software Solutions CODESYS Control RTE, CODESYS Control Runtime embedded, CODESYS Control Runtime full 2.3.2.8, 2.3.7.17, 2.4.7.40

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2012-05032 3S CoDeSys Improper Access ControlPriority MEDIUM 50
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-6069
  2. 2026-10-03 Alias added: GHSA-6q9j-3828-rfxj

References

Advisory 1

Other 4

  • TI-2012-05032 3S CoDeSys Improper Access Control CVSS 3.1CRITICAL 9.8
  • TI-2015-05446 3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences