Skip to content

Product

3s-smart software solutions CODESYS Control Runtime embedded vulnerabilities

2 published CVES affecting 3s-smart software solutions CODESYS Control Runtime embedded, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest 3s-smart software solutions CODESYS Control Runtime embedded CVEs

Newest publication first

  1. CVE-2012-6069 3S CoDeSys Relative Path Traversal

    Published
    CriticalCVSS 10.0 EPSS 2.6%

    The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacke...

  2. CVE-2012-6068 3S CoDeSys Improper Access Control

    Published
    CriticalCVSS 9.8 EPSS 5.3%

    The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.