Codesys Runtime System (3s-software) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2018-02-15. Vendor: 3s-software.

CVEs of Codesys Runtime System

• CVE-2018-5440 - CVSS 9.8 (critical), 2018-02-15: A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers…
• CVE-2015-6482 - CVSS 5 (medium), 2015-10-18: Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and…
• CVE-2014-0769 - CVSS 9.3 (critical), 2014-04-25: The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for…
• CVE-2014-0760 - CVSS 9.3 (critical), 2014-04-25: The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method…
• CVE-2012-6069 - CVSS 10 (critical), 2013-01-21: The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside…
• CVE-2012-6068 - CVSS 9.8 (critical), 2013-01-21: The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the…