Codesys Control V3 Runtime System Toolkit vulnerabilities

2 vulnerabilities

Known vulnerabilities in Codesys Control V3 Runtime System Toolkit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2018-25048codesyscontrol_for_beaglebone+23
EPSS score
1.02%
The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.7.8CVE-2020-12069codesyscodesys v3 containing the cmpusermgr+64
EPSS score
0.17%
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.