TI-2018-03954 CVE-2018-5440 · GHSA-8jg4-q5rf-9hjg
Stack-based buffer overflow in 3S-Smart Software Solutions GmbH CODESYS Web Server
Priority MEDIUM 48
A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server.
Vulnerabilities
6 records
TI-2015-05445 CVE-2015-6482 · GHSA-qcv4-42jw-9gpj
Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote…
Priority LOW 27
Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted request.
TI-2014-00717 CVE-2014-0769 · GHSA-q52x-cg29-xrxr
Festo CECX-X-(C1/M1) Controller Improper Authentication
Priority MEDIUM 45
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to…
TI-2014-00708 CVE-2014-0760 · GHSA-m299-9mh6-7cv5
Festo CECX-X-(C1/M1) Controller Improper Authentication
Priority MEDIUM 46
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacke…
TI-2012-05033 CVE-2012-6069 · GHSA-6q9j-3828-rfxj
3S CoDeSys Relative Path Traversal
Priority MEDIUM 48
The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope.
TI-2012-05032 CVE-2012-6068 · GHSA-hh9j-6v4h-23q7
3S CoDeSys Improper Access Control
Priority MEDIUM 50
The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer file…