Authentication flaw

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to 1 modify the configuration via a request to the debug service on port 4000 o...

CVE-2014-0760

CVE-2014-0760 affects Festo CECX-X-C1 and CECX-X-M1 controllers (CoDeSys/SoftMotion). The issue is an undocumented FTP access path that allows remote attackers to execute arbitrary code or trigger a denial of service via unspecified vectors. Public exploitation is noted in ICS-CERT advisories; mu...

CVE-2014-0760 Festo CECX-X-(C1/M1) Controller Improper Authentication

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service application crash vi...

CVE-2014-0769

Vulnerability CVE-2014-0769 affects Festo CECX-X-C1 and CECX-X-M1 controllers (CoDeSys/SoftMotion). The issue is improper authentication (CWE-287): unauthenticated access to TCP ports 4000 (debug) and 4001 (log) allows remote attackers to modify configuration or delete log entries. Public advisor...

CVE-2014-0769 Festo CECX-X-(C1/M1) Controller Improper Authentication

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to 1 modify the configuration via a request to the debug service on port 4000 o...

PT-2014-3822 · 3S Smart Software Solutions +1 · Codesys +2

Name of the Vulnerable Software and Affected Versions: Festo CECX-X-C1 Modular Master Controller with CoDeSys version affected versions not specified Festo CECX-X-M1 Modular Controller with CoDeSys version affected versions not specified Description: The issue involves an undocumented access meth...

PT-2014-3831 · 3S Smart Software Solutions +1 · Codesys +2

Name of the Vulnerable Software and Affected Versions: Festo CECX-X-C1 Modular Master Controller with CoDeSys affected versions not specified Festo CECX-X-M1 Modular Controller with CoDeSys affected versions not specified Description: The issue allows remote attackers to modify the configuration ...

3S CoDeSys Runtime Toolkit NULL Pointer Dereference (credentialed check)

Binary data scadacodesysplcwinnt24744local.nbin...

3S CODESYS Development System V2 Installed (Windows)

Binary data scadaappcodesys2detect.nbin...

3S CoDeSys Runtime Toolkit NULL Pointer Dereference (uncredentialed check)

Binary data scadacodesysplcwinnt24744remote.nbin...

CVE-2014-0757

Smart Software Solutions 3S CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via unspecified vectors...

Null pointer dereference

Smart Software Solutions 3S CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via unspecified vectors...

CVE-2014-0757 Smart Software Solutions (3S) CoDeSys Runtime Toolkit NULL Pointer Dereference

Smart Software Solutions 3S CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via unspecified vectors...

CVE-2014-0757

The CVE-2014-0757 issue affects 3S CoDeSys Runtime Toolkit; versions older than 2.4.7.44 are vulnerable to a NULL pointer dereference that can remotely crash the Runtime Toolkit. ICS-CERT states the vulnerability can be exploited remotely and provides a mitigation: update to CoDeSys RT Toolkit v2...

3S CODESYS Gateway-Server Vulnerabilities

Overview This updated advisory is a follow-up to the original advisory titled ICSA-13-050-01, 3S CODESYS Gateway-Server Vulnerabilities that was published February 19, 2013, on the ICS-CERT Web page. This updated advisory provides mitigation details for five vulnerabilities in the 3S-Smart Softwa...

3S Smart Software Solutions CoDeSys Gateway Server Stack Buffer Overflow (CVE-2012-4708)

A stack buffer overflow vulnerability has been reported in 3S Smart Software CoDeSys...

3S Smart Software Solutions CoDeSys Gateway Server Heap Buffer Overflow (CVE-2012-4706)

A heap buffer overflow vulnerability has been reported in 3S Smart Software CoDeSys...

3S Smart Software Solutions CoDeSys Gateway Server Memory Access Error (CVE-2012-4704)

A memory access error vulnerability has been reported in Smart Software CoDeSys Gateway Server...

3S Smart Software Solutions CoDeSys Gateway Server Denial Of Service (CVE-2012-4707)

A denial of service vulnerability has been reported in 3S Smart Software Solutions CoDeSys Gateway Server...

CVE-2013-2781

Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via unspecified vectors...