{"schemaVersion":3,"id":"CVE-2012-6069","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The CoDeSys Runtime Toolkit’s file transfer functionality does not\nperform input validation, which allows an attacker to access files and\ndirectories outside the intended scope. This may allow an attacker to\nupload and download any file on the device. This could allow the\nattacker to affect the availability, integrity, and confidentiality of\nthe device.","dates":{"published":"2013-01-21T21:00:00.000Z","modified":"2025-07-02T20:15:19.655Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":10,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":10,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02637,"percentile":0.85357,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.02637},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02637,"percentile":0.85357}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02637,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02637,"percentile":0.85357}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-23","name":"Relative Path Traversal","description":"The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as \"..\" that can resolve to a location that is outside of that directory.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/23.html"},{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"3s-smart software solutions","product":"codesys control rte","name":"CODESYS Control RTE","label":"codesys control rte","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.3.7.17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.7.17","eol":null,"hubHref":"/vendor/3s-smart_software_solutions/codesys_control_rte"},{"vendor":"3s-smart software solutions","product":"codesys control runtime embedded","name":"CODESYS Control Runtime embedded","label":"codesys control runtime embedded","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.3.2.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.2.8","eol":null,"hubHref":"/vendor/3s-smart_software_solutions/codesys_control_runtime_embedded"},{"vendor":"3s-smart software solutions","product":"codesys control runtime full","name":"CODESYS Control Runtime full","label":"codesys control runtime full","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.4.7.40","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.7.40","eol":null,"hubHref":"/vendor/3s-smart_software_solutions/codesys_control_runtime_full"},{"vendor":"3s-software","product":"codesys_runtime_system","name":"codesys runtime system","label":"codesys_runtime_system","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.4.0","noFixRecorded":false,"fixedIn":null},{"text":"2.3.9.8","noFixRecorded":false,"fixedIn":null},{"text":"2.3.9.35","noFixRecorded":false,"fixedIn":null},{"text":"2.3.9.36","noFixRecorded":false,"fixedIn":null},{"text":"2.3.9.37","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.4.0 | 2.3.9.8 | 2.3.9.35 | 2.3.9.36 | 2.3.9.37","eol":null,"hubHref":"/vendor/3s-software/codesys_runtime_system"},{"vendor":"festo","product":"cecx-x-c1 modular master controller with codesys","name":"CECX-X-C1 Modular Master Controller with CoDeSys","label":"cecx-x-c1 modular master controller with codesys","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All","noFixRecorded":false,"fixedIn":null}],"versionsText":"All","eol":null,"hubHref":"/vendor/festo/cecx-x-c1_modular_master_controller_with_codesys"},{"vendor":"festo","product":"cecx-x-m1 modular controller with codesys and softmotion","name":"CECX-X-M1 Modular Controller with CoDeSys and SoftMotion","label":"cecx-x-m1 modular controller with codesys and softmotion","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All","noFixRecorded":false,"fixedIn":null}],"versionsText":"All","eol":null,"hubHref":"/vendor/festo/cecx-x-m1_modular_controller_with_codesys_and_softmotion"}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.codesys.com/news-events/press-releases/detail/article/sicherheitsluecke-in-codesys-v23-laufzeitsystem.html","label":"www.codesys.com/news-events/…","hostname":"www.codesys.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-01","label":"www.cisa.gov/news-events/ics-advisories/icsa-13-011-01","hostname":"www.cisa.gov","tags":[]},{"url":"http://www.digitalbond.com/tools/basecamp/3s-codesys/","label":"www.digitalbond.com/tools/basecamp/3s-codesys/","hostname":"www.digitalbond.com","tags":["X Refsource MISC"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-084-01","label":"www.cisa.gov/news-events/ics-advisories/icsa-14-084-01","hostname":"www.cisa.gov","tags":[]},{"url":"https://us.codesys.com/ecosystem/security/","label":"us.codesys.com/ecosystem/security/","hostname":"us.codesys.com","tags":[]},{"url":"http://www.securityfocus.com/bid/56300","label":"www.securityfocus.com/bid/56300","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","X Transferred"]},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-084-01","label":"ics-cert.us-cert.gov/advisories/ICSA-14-084-01","hostname":"ics-cert.us-cert.gov","tags":["X Refsource MISC","X Transferred","US Government Resource"]},{"url":"http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-01.pdf","label":"www.us-cert.gov/control_systems/pdf/ICSA-13-011-01.pdf","hostname":"www.us-cert.gov","tags":["X Refsource MISC","X Transferred","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2013-01-21T21:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-07-02T20:15:19.655Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T14:00:26.928Z","stale":false,"partial":false}}