3s-software codesys runtime system vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote malicious users to (1) execute commands via the command-line interface in the TCP listener service or (2) transfer files via requests to the TCP listener service.

3s-software Codesys Runtime System 2.3.9.37 3s-software Codesys Runtime System 2.3.9.35 3s-software Codesys Runtime System 2.3.9.8 3s-software Codesys Runtime System 2.3.9.36 3s-software Codesys Runtime System 2.4.0

10

CVSSv2

Directory traversal vulnerability in the Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x allows remote malicious users to read, overwrite, or create arbitrary files via a .. (dot dot) in a request to the TCP listener service.

3s-software Codesys Runtime System 2.4.0 3s-software Codesys Runtime System 2.3.9.35 3s-software Codesys Runtime System 2.3.9.36 3s-software Codesys Runtime System 2.3.9.8 3s-software Codesys Runtime System 2.3.9.37

7.5

CVSSv2

A Stack-based Buffer Overflow issue exists in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request ma...

3s-software Codesys Runtime System 3s-software Codesys Web Server 2.3

5

CVSSv2

Runtime Toolkit prior to 2.4.7.48 in 3S-Smart CODESYS prior to 2.3.9.48 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted request.

3s-software Codesys Runtime System

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook