CVE-2011-5058 The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using...
MediumCVSS 6.4
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ (backslash) characters in an HTTP GET request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3ssoftware codesys | = 3.4-sp4 | No fix listed |
References
- aluigi.altervista.org exploit
- 47018 third-party-advisory vendor-advisory
- www.us-cert.gov us-government-resource
- codesys-cmbwebserver-dir-traversal(72339) vdb-entry