CVE-2012-4704

Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet...

CVE-2012-4704: Improper Input Validation

Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet...

PT-2013-1703

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway-Server versions prior to 2.3.9.27 Description The issue allows remote attackers to execute arbitrary code via a crafted packet due to an array index error. Recommendations For versions prior to 2.3.9.27, update to version...

PT-2013-1704

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway-Server versions prior to 2.3.9.27 Description A directory traversal issue allows remote attackers to execute arbitrary code via crafted pathnames. Recommendations For versions prior to 2.3.9.27, update to version 2.3.9.27 or...

PT-2013-1707

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway-Server versions prior to 2.3.9.27 Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted packet. Recommendations For versions prior to 2.3.9.27, update to version...

CVE-2012-4708: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet...

CVE-2012-4705: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname...

CVE-2012-4707: Improper Control of Generation of Code

3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access...

CVE-2012-4706: Undefined Security Weakness

Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow...

PT-2013-1705

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway-Server versions prior to 2.3.9.27 Description The issue is caused by an integer signedness error that allows remote attackers to trigger a heap-based buffer overflow via a crafted packet, resulting in a denial of service...

PT-2013-1706

Name of the Vulnerable Software and Affected Versions 3S CODESYS Gateway-Server versions prior to 2.3.9.27 Description The issue allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access. Recommendations For versions prior to 2.3.9.27, update to...

3S CODESYS Gateway Use After Free

OVERVIEW Independent researcher Nicholas Miles has identified a vulnerability in the 3S CODESYS Gateway application that can result in a denial-of-service DoS condition. 3S has produced an update that mitigates this vulnerability. Nicholas Miles has tested this update and validates that it resolv...

SCADA 3S CoDeSys Gateway Server Directory Traversal

This module exploits a directory traversal vulnerability that allows arbitrary file creation, which can be used to execute a mof file in order to gain remote execution within the SCADA system. Module Options msf use exploit/windows/scada/codesys/gatewayservertraversal msf...

CADA 3S CoDeSys Gateway Server - Directory Traversal (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework http://metasploit.com require 'msf/core' class MetasploitModule 'SCADA 3S CoDeSys Gateway Server Directory Traversal', 'Description' = %q This module exploits a directory...

CVE-2012-6068

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service...

CVE-2012-6069

The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacker to affect the...

Authentication flaw

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to 1 execute commands via the command-line interface in the TCP listener service or 2 transfer files via requests to the TCP listener service...

Directory traversal

Directory traversal vulnerability in the Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x allows remote attackers to read, overwrite, or create arbitrary files via a .. dot dot in a request to the TCP listener service...

CVE-2012-6068

The CVE-2012-6068 issue affects the CODESYS Runtime Toolkit in the Runtime System 2.3.x–2.4.x, where authentication is not required for the TCP listener, enabling remote command execution or file transfers. Technical details from connected advisories (ICS-CERT and 3S CoDeSys notes) confirm improp...

CVE-2012-6069

The CVE-2012-6069 issue is a Relative Path Traversal vulnerability in the CoDeSys Runtime Toolkit’s file transfer functionality (CODESYS Runtime Toolkit). The available Connected documents confirm an input validation flaw allowing an attacker to access directories outside the intended scope and p...