Description
In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which could allow an attacker access to the device and sensitive information, including user credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 3S-Smart | 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0 | 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0 | — |
Advisories 6
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- ICSA-25-273-04 Festo Controller CECC-S,-LK,-D Family Firmware (Update A) CISA ICS & IT advisories · Nov 13, 2025
- FSA-202202 Festo: Controller CECC-S,LK,D family <= 2.3.8.1 - multiple vulnerabilities in CODESYS V3 runtime system CERT@VDE · Nov 3, 2025
- VDE-2021-033 TRUMPF Laser GmbH: multiple products prone to codesys runtime vulnerabilities CERT@VDE · Aug 12, 2021
- ICSA-18-352-03 3S-Smart Software Solutions GmbH CODESYS Control V3 Products CISA ICS & IT advisories · Dec 18, 2018