CPE Details
3s-Software CODESYS Runtime System 2.3.9.8
2.3.9.8
2013-01-22
16h45 +00:00
16h45 +00:00
2013-01-23
19h04 +00:00
19h04 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:3s-software:codesys_runtime_system:2.3.9.8:*:*:*:*:*:*:*
Informations
Vendor
3s-softwareProduct
codesys_runtime_systemVersion
2.3.9.8Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted request. | 5 |
|||
| The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service. | 9.8 |
Critical |
||
| The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacker to affect the availability, integrity, and confidentiality of the device. | 10 |
Critical |
