3S CoDeSys (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: 3S-Smart Software Solutions Equipment: CoDeSys Vulnerabilities: Improper Access Control, Relative Path Traversal 2. UPDATE INFORMATION This updated advisory is a...

CVE-2012-6068

The CVE-2012-6068 issue affects the CODESYS Runtime Toolkit in the Runtime System 2.3.x–2.4.x, where authentication is not required for the TCP listener, enabling remote command execution or file transfers. Technical details from connected advisories (ICS-CERT and 3S CoDeSys notes) confirm improp...