Lucene search

[email protected]CVE-2018-25048

HistoryMar 23, 2023 - 11:15 a.m.

CVE-2018-25048

2023-03-2311:15:12

CWE-22

[email protected]

web.nvd.nist.gov

cve-2018-25048

codesys

runtime system

vulnerability

path traversal

access

modification

system files

dos

device security

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.

Affected configurations

NVD

Node

codesyscontrol_for_beagleboneRange3.0.0.0–3.5.12.30

codesyscontrol_for_empc-a\/imx6Range3.0.0.0–3.5.12.30

codesyscontrol_for_iot2000Range3.0.0.0–3.5.12.30

codesyscontrol_for_pfc100Range3.0.0.0–3.5.12.30

codesyscontrol_for_pfc200Range3.0.0.0–3.5.12.30

codesyscontrol_for_raspberry_piRange3.0.0.0–3.5.12.30

codesyscontrol_rteRange3.0.0.0–3.5.12.30

codesyscontrol_v3_runtime_system_toolkitRange3.0.0.0–3.5.12.30

codesyscontrol_winRange3.0.0.0–3.5.12.30

codesysembedded_target_visu_toolkitRange3.0–3.5.12.30

codesyshmiRange3.0–3.5.12.30

codesysremote_target_visu_toolkitRange3.0–3.5.12.30

codesysruntime_plcwinntRange2.0.0.0–2.4.7.52

codesysruntime_system_toolkitRange2.0.0.0–2.4.7.52x86

codesysruntime_system_toolkitMatch3.5.15.0

codesyssimulation_runtimeRange3.0.0.0–3.5.12.30

CPENameOperatorVersion
codesys:control_for_beaglebonecodesys control for beaglebonelt3.5.12.30
codesys:control_for_empc-a\/imx6codesys control for empc-a/imx6lt3.5.12.30
codesys:control_for_iot2000codesys control for iot2000lt3.5.12.30
codesys:control_for_pfc100codesys control for pfc100lt3.5.12.30
codesys:control_for_pfc200codesys control for pfc200lt3.5.12.30
codesys:control_for_raspberry_picodesys control for raspberry pilt3.5.12.30
codesys:control_rtecodesys control rtelt3.5.12.30
codesys:control_v3_runtime_system_toolkitcodesys control v3 runtime system toolkitlt3.5.12.30
codesys:control_wincodesys control winlt3.5.12.30
codesys:embedded_target_visu_toolkitcodesys embedded target visu toolkitlt3.5.12.30

CPE	Name	Operator	Version
codesys:control_for_beaglebone	codesys control for beaglebone	lt	3.5.12.30
codesys:control_for_empc-a\/imx6	codesys control for empc-a/imx6	lt	3.5.12.30
codesys:control_for_iot2000	codesys control for iot2000	lt	3.5.12.30
codesys:control_for_pfc100	codesys control for pfc100	lt	3.5.12.30
codesys:control_for_pfc200	codesys control for pfc200	lt	3.5.12.30
codesys:control_for_raspberry_pi	codesys control for raspberry pi	lt	3.5.12.30
codesys:control_rte	codesys control rte	lt	3.5.12.30
codesys:control_v3_runtime_system_toolkit	codesys control v3 runtime system toolkit	lt	3.5.12.30
codesys:control_win	codesys control win	lt	3.5.12.30
codesys:embedded_target_visu_toolkit	codesys embedded target visu toolkit	lt	3.5.12.30

Rows per page:

1-10 of 161

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Control for BeagleBone",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": " Control for emPC-A/iMX6",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for IOT2000",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for PFC100",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for PFC200",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for Raspberry Pi",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control RTE V3 (all variants)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control Win V3 (all variants)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "V3 Simulation Runtime (part of the CODESYS Development System)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "HMI V3 (all variants)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "V3 Remote Target Visu (all variants)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control V3 Runtime System Toolkit",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "V3 Embedded Target Visu Toolkit",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "V3 Remote Target Visu Toolkit",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.12.30",
        "status": "affected",
        "version": "3.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Runtime Toolkit 32 bit embedded",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "2.3.2.10",
        "status": "affected",
        "version": "2.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Runtime Toolkit 32 bit full",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "2.4.7.52",
        "status": "affected",
        "version": "2.0.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Runtime PLCWinNT",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "2.4.7.52",
        "status": "affected",
        "version": "2.0.0.0",
        "versionType": "custom"
      }
    ]
  }
]

References

customers.codesys.com/fileadmin/data/customers/security/2018/Advisory2018-04_CDS-59017.pdf

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

Related for CVE-2018-25048

nvd1 cvelist1 prion1