Description
The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CODESYS | Control for BeagleBone | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | Control for emPC-A/iMX6 | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | Control for IOT2000 | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | Control for PFC100 | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | Control for PFC200 | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | Control for Raspberry Pi | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | Control RTE V3 (all variants) | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | Control Win V3 (all variants) | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | V3 Simulation Runtime (part of the CODESYS Development System) | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | HMI V3 (all variants) | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | V3 Remote Target Visu (all variants) | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | Control V3 Runtime System Toolkit | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | V3 Embedded Target Visu Toolkit | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | V3 Remote Target Visu Toolkit | 3.0.0.0 – < 3.5.12.30 | 3.5.12.30 |
| CODESYS | Runtime Toolkit 32 bit embedded | 2.0.0.0 – < 2.3.2.10 | 2.3.2.10 |
| CODESYS | Runtime Toolkit 32 bit full | 2.0.0.0 – < 2.4.7.52 | 2.4.7.52 |
| CODESYS | Runtime PLCWinNT | 2.0.0.0 – < 2.4.7.52 | 2.4.7.52 |