3s-smart software solutions vulnerabilities

Products

• CoDeSys 2
• CODESYS Control RTE 2
• CODESYS Control Runtime embedded 2
• CODESYS Control Runtime full 2
• codesys gateway server 1

Latest 3s-smart software solutions CVEs

Newest publication first

1. CVE-2015-6484 3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted (1) GET or (2) POST request.

   Published 2015-10-25

   Medium·CVSS 5.0 EPSS 2.1%

   3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted (1) GET or (2) POST request.

2. CVE-2012-6069 3S CoDeSys Relative Path Traversal

   Published 2013-01-21

   Critical·CVSS 10.0 EPSS 2.6%

   The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacke...

3. CVE-2012-6068 3S CoDeSys Improper Access Control

   Published 2013-01-21

   Critical·CVSS 9.8 EPSS 5.3%

   The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.