EUVD-2021-17118

Malware in sbrugna...

ABB ACS880 Drives Containing CODESYS RTS

SUMMARY Multiple vulnerabilities regarding the CODESYS Runtime System from CODESYS Group have been publicly reported. CODESYS Runtime System is utilized in the firmware of ABB ACS880 drives to provide IEC 61131-3 programming capabilities. These vulnerabilities could lead to out-of-bound memory...

Multiple Codesys Products Input Validation Error Vulnerability

3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...

PT-2023-10802

Name of the Vulnerable Software and Affected Versions CODESYS runtime system affected versions not specified Description The issue allows a remote low-privileged attacker to exploit a path traversal vulnerability, enabling access and modification of all system files, as well as causing a...

3S-Smart Software Solutions CODESYS Runtime System Input Validation Error Vulnerability

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. An input validation error vulnerability exists in 3S-Smart Software Solutions...

CVE-2021-30188

CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow...

CVE-2021-30195

CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation...

PT-2021-3346 · 3S Smart Software Solutions · Codesys V2 Runtime System

Name of the Vulnerable Software and Affected Versions: CODESYS V2 runtime system SP versions prior to 2.4.7.55 Description: The issue is a stack-based buffer overflow in the CODESYS V2 runtime system SP. This can be exploited by a remote attacker to impact the confidentiality, integrity, and...

CVE-2012-6068: Improper Access Control

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service...

PT-2012-1189 · 3S Smart Software Solutions · Codesys Runtime System

Name of the Vulnerable Software and Affected Versions: CODESYS Runtime System versions 2.3.x through 2.4.x Description: The issue allows remote attackers to read, overwrite, or create arbitrary files via a .. dot dot in a request to the TCP listener service. This is due to incorrect restriction o...

PT-2012-1188 · 3S Smart Software Solutions · Codesys Runtime System +1

Name of the Vulnerable Software and Affected Versions: CODESYS Runtime System versions 2.3.x through 2.4.x Description: The issue is related to the lack of authentication requirements in the default configuration of the CODESYS Runtime Toolkit. This allows remote attackers to execute commands via...