Path traversal

2023-03-2311:15:00

PRIOn knowledge base

www.prio-n.com

codesys

runtime system

path traversal

vulnerability

remote attacker

system files

dos

nvd

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.0%

JSON

The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.

CPENameOperatorVersion
control_for_beaglebonege3.0.0.0
control_for_beaglebonelt3.5.12.30
control_for_empc-a\\/imx6ge3.0.0.0
control_for_empc-a\\/imx6lt3.5.12.30
control_for_iot2000ge3.0.0.0
control_for_iot2000lt3.5.12.30
control_for_pfc100ge3.0.0.0
control_for_pfc100lt3.5.12.30
control_for_pfc200ge3.0.0.0
control_for_pfc200lt3.5.12.30

Name	Operator	Version
control_for_beaglebone	ge	3.0.0.0
control_for_beaglebone	lt	3.5.12.30
control_for_empc-a\\/imx6	ge	3.0.0.0
control_for_empc-a\\/imx6	lt	3.5.12.30
control_for_iot2000	ge	3.0.0.0
control_for_iot2000	lt	3.5.12.30
control_for_pfc100	ge	3.0.0.0
control_for_pfc100	lt	3.5.12.30
control_for_pfc200	ge	3.0.0.0
control_for_pfc200	lt	3.5.12.30