Description
An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | 3S | 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30 | — |
Advisories 3
- VDE-2022-035 WAGO: Multiple product series affected by multiple CODESYS vulnerabilities CERT@VDE · Aug 17, 2022
- VDE-2021-061 Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities CERT@VDE · Apr 26, 2022
- VDE-2021-054 Pilz: Multiple vulnerabilities in CODESYS V2 and V3 runtime system CERT@VDE · Apr 26, 2022