CVE-2012-6068

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.

CVE-2012-6069

The CoDeSys Runtime Toolkit’s file transfer functionality does notperform input validation, which allows an attacker to access files anddirectories outside the intended scope. This may allow an attacker toupload and download any file on the device. This could allow theattacker to affect the availab...