3s-software Codesys Runtime System — known CVE vulnerabilities

Every CVE whose affected-product data names 3s-software Codesys Runtime System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2012-6069 — CVSS 10.0 (critical): The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and…
• CVE-2012-6068 — CVSS 9.8 (critical): The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute…
• CVE-2018-5440 — CVSS 9.8 (critical): A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based…
• CVE-2014-0760 — CVSS 9.3 (critical): The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an…
• CVE-2014-0769 — CVSS 9.3 (critical): The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require…
• CVE-2015-6482 — CVSS 5.0 (medium): Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer…