CVE-2012-6069
3S CoDeSys Relative Path Traversal
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2.3.2.8, 2.4.7.40, 2.3.7.17
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacker to affect the availability, integrity, and confidentiality of the device.
Timeline
- CVE published
- Record last updated
Affected versions
- 3S-Smart Software Solutions CODESYS Control Runtime embedded
fixed in 2.3.2.8
- 3S-Smart Software Solutions CODESYS Control Runtime full
fixed in 2.4.7.40
- 3S-Smart Software Solutions CODESYS Control RTE
fixed in 2.3.7.17
- Festo CECX-X-C1 Modular Master Controller with CoDeSys
All versions
- Festo CECX-X-M1 Modular Controller with CoDeSys and SoftMotion
All versions
- 3S-Smart Software Solutions CoDeSys
Version range not reported