Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: 3S-Smart Software Solutions CODESYS Control RTE, CODESYS Control Runtime embedded, CODESYS Control Runtime full 2.3.2.8, 2.3.7.17, 2.4.7.40 Clear all filters
TI-2012-05033 CVE-2012-6069 · GHSA-6q9j-3828-rfxj

3S CoDeSys Relative Path Traversal

Priority MEDIUM 48

The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02637 Published 2013-01-21 Fixed in 2.3.2.8, 2.4.7.40 +2 CWE-23
TI-2012-05032 CVE-2012-6068 · GHSA-hh9j-6v4h-23q7

3S CoDeSys Improper Access Control

Priority MEDIUM 50

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer file…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05266 Published 2013-01-21 Fixed in 2.3.2.8, 2.4.7.40 +2 CWE-284