Lucene search
HistoryJan 21, 2013 - 9:55 p.m.
CVE-2012-6068
cve-2012-6068
runtime toolkit
codesys
authentication bypass
remote attack
command execution
file transfer
nvd
7.4 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.005 Low
EPSS
Percentile
75.5%
The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to (1) execute commands via the command-line interface in the TCP listener service or (2) transfer files via requests to the TCP listener service.
Related
prion
prion
Authentication flaw
2013-01-21 21:55:00
cvelist
cvelist
CVE-2012-6068
2013-01-21 21:00:00
ics
ics
3S CoDeSys (Update A)
2020-09-24 12:00:00
Festo CECX-X-(C1/M1) Controller Vulnerabilities
2018-09-06 12:00:00
openvas
openvas
CODESYS Multiple Vulnerabilities (Oct 2012) - Active Check
2012-10-29 00:00:00
7.4 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.005 Low
EPSS
Percentile
75.5%
Related for CVE-2012-6068