3S Software vulnerabilities
13 vulnerabilities
Known vulnerabilities in 3S Software products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Codesys Gateway Server6 vulnerabilities
- Codesys Runtime System6 vulnerabilities
- Codesys Runtime Toolkit1 vulnerabilities
- Codesys Web Server1 vulnerabilities
CVE-2018-54403s-softwarecodesys_runtime_system+1
EPSS score3.10%
A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request may cause a buffer overflow and could therefore execute arbitrary code on the web server or lead to a denial-of-service condition due to a crash in the web server.CVE-2013-27813s-softwarecodesys_gateway-serverEPSS score3.80%
Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.CVE-2015-64823s-softwarecodesys_runtime_systemEPSS score2.07%
Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted request.CVE-2014-07603s-softwarecodesys_runtime_system+5EPSS score3.35%
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1
Modular Controller with CoDeSys and SoftMotion provide an undocumented
access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application
crash) via unspecified vectors.CVE-2014-07573s-softwarecodesys_runtime_toolkit+1EPSS score3.65%
Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.CVE-2014-07693s-softwarecodesys_runtime_system+5EPSS score2.32%
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.CVE-2012-47053s-softwarecodesys_gateway-serverEPSS score64.87%
Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.CVE-2012-47073s-softwarecodesys_gateway-serverEPSS score3.56%
3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access.CVE-2012-47063s-softwarecodesys_gateway-serverEPSS score1.61%
Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted packet that triggers a heap-based buffer overflow.CVE-2012-47083s-softwarecodesys_gateway-serverEPSS score7.43%
Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.CVE-2012-47043s-softwarecodesys_gateway-serverEPSS score4.15%
Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.CVE-2012-60693s-smart software solutionscodesys control rte+5EPSS score2.64%
The CoDeSys Runtime Toolkit’s file transfer functionality does not
perform input validation, which allows an attacker to access files and
directories outside the intended scope. This may allow an attacker to
upload and download any file on the device. This could allow the
attacker to affect the availability, integrity, and confidentiality of
the device.CVE-2012-60683s-smart software solutionscodesys control rte+5EPSS score5.27%
The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.