Codesys Runtime System Security Vulnerabilities and Issues — Codesys Runtime System CVE List

Lucene search

3s-softwareCodesys Runtime System

3 matches found

CVE•added 2014/04/25 5:12 a.m.•56 views

CVE-2014-0769

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 o...

9.3CVSS7.2AI score0.00325EPSS

CVE•added 2014/04/25 5:12 a.m.•49 views

CVE-2014-0760

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1Modular Controller with CoDeSys and SoftMotion provide an undocumentedaccess method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (applicationcrash) via u...

9.3CVSS7.8AI score0.02009EPSS

CVE•added 2018/02/15 10:29 a.m.•38 views

CVE-2018-5440

A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request may cause a b...

9.8CVSS9.7AI score0.01381EPSS