3s-Software

13 CVEs across 4 3s-Software products. Browse 3s-Software vulnerabilities, severities, and proof-of-concept exploits.

3s-Software products with known CVEs

ProductCVEs
Codesys Gateway-Server6
Codesys Runtime System6
Codesys Runtime Toolkit1
Codesys Web Server1
3s-Software CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2018-5440Critical9.82018-02-15A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers r…
CVE-2015-64822015-10-18Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and applicat…
CVE-2014-07692014-04-25The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for conne…
CVE-2014-07602014-04-25The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method…
CVE-2014-07572014-01-31Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer dereference and applic…
CVE-2013-27812013-05-23Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service (daemon crash) or po…
CVE-2012-47082013-02-24Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.
CVE-2012-47072013-02-243S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access.
CVE-2012-47062013-02-24Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a…
CVE-2012-47052013-02-24Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafte…
CVE-2012-47042013-02-24Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.
CVE-2012-6069Critical10.02013-01-21The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside…
CVE-2012-6068Critical9.82013-01-21The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the comman…