Path Traversal in 3s-smart Software Solutions Codesys
CVE-2012-6069
The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file…
EPSS: 0.026 (83.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
Affected products
- 3s-smart Software Solutions Codesys — versions 3.X
- 3s-smart Software Solutions Codesys Control Rte — versions 0
- 3s-smart Software Solutions Codesys Control Runtime Embedded — versions 0
- 3s-smart Software Solutions Codesys Control Runtime Full — versions 0
- 3s-software Codesys_runtime_system — versions 2.4.0, 2.3.9.8, 2.3.9.35
- Festo Cecx-x-c1 Modular Master Controller With Codesys — versions All
- Festo Cecx-x-m1 Modular Controller With Codesys And Softmotion — versions All
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Vendor Advisory)
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov (x_refsource_MISC)
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 (US Government Resource)
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 (US Government Resource)
Frequently asked questions
- What is CVE-2012-6069?
- CVE-2012-6069 is a critical-severity vulnerability in 3s-smart Software Solutions Codesys, classified under Relative Path Traversal. CVSS score: 10.0/10. Published 2013-01-21.
- How severe is CVE-2012-6069?
- Critical severity. CVSS v3 base score is 10.0 out of 10.