3s-software codesys runtime toolkit vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Smart Software Solutions (3S) CoDeSys Runtime Toolkit prior to 2.4.7.44 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.

3s-software Codesys Runtime Toolkit

10

CVSSv2

Directory traversal vulnerability in the Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x allows remote malicious users to read, overwrite, or create arbitrary files via a .. (dot dot) in a request to the TCP listener service.

3s-software Codesys Runtime System 2.4.0 3s-software Codesys Runtime System 2.3.9.35 3s-software Codesys Runtime System 2.3.9.36 3s-software Codesys Runtime System 2.3.9.8 3s-software Codesys Runtime System 2.3.9.37

10

CVSSv2

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote malicious users to (1) execute commands via the command-line interface in the TCP listener service or (2) transfer files via requests to the TCP listener service.

3s-software Codesys Runtime System 2.3.9.37 3s-software Codesys Runtime System 2.3.9.35 3s-software Codesys Runtime System 2.3.9.8 3s-software Codesys Runtime System 2.3.9.36 3s-software Codesys Runtime System 2.4.0

5

CVSSv2

Runtime Toolkit prior to 2.4.7.48 in 3S-Smart CODESYS prior to 2.3.9.48 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted request.

3s-software Codesys Runtime System

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook