Browse CVEs

CRITICAL 9.8 CVE-2018-5440 A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web… Codesys Runtime System 1.1.9.19+ Fix from $2,3002018-02-15 MEDIUM 5.0 CVE-2015-6482 Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference an… Codesys Runtime System after 2.3.9.47 Fix from $1,6002015-10-18 HIGH 9.3 CVE-2014-0760 The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented acc… Codesys Runtime System Mitigation only Fix from $1,9502014-04-25 MEDIUM 5.0 CVE-2014-0757 Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer dereference … Codesys Runtime Toolkit after 2.4.7.43 Fix from $1,6002014-01-31 HIGH 10.0 CVE-2013-2781 Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service (daemon cr… Codesys Gateway Server Mitigation only Fix from $1,9502013-05-23 HIGH 10.0 CVE-2012-4704 Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet. Codesys Gateway Server after 2.3.9.20 Fix from $1,9502013-02-24 HIGH 10.0 CVE-2012-4705EPSS 66% Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involvin… Codesys Gateway Server after 2.3.9.20 Fix from $1,9502013-02-24 HIGH 10.0 CVE-2012-4707 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access. Codesys Gateway Server after 2.3.9.19 Fix from $1,9502013-02-24 HIGH 10.0 CVE-2012-4708EPSS 7% Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet. Codesys Gateway Server after 2.3.9.20 Fix from $1,9502013-02-24 HIGH 7.8 CVE-2012-4706 Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that … Codesys Gateway Server after 2.3.9.20 Fix from $1,9502013-02-24 CRITICAL 10.0 CVE-2012-6069 The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directori… Codesys Runtime System Mitigation only Fix from $2,3002013-01-21 CRITICAL 9.8 CVE-2012-6068EPSS 5% The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via … Codesys Runtime System Mitigation only Fix from $2,3002013-01-21