CVE-2012-6068
3S CoDeSys Improper Access Control
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 5.3% · top 7.4% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.
Weakness
Affected products
3S-Smart Software Solutions · CODESYS Control Runtime embedded
- affected < 2.3.2.8
3S-Smart Software Solutions · CODESYS Control Runtime full
- affected < 2.4.7.40
3S-Smart Software Solutions · CODESYS Control RTE
- affected < 2.3.7.17
Festo · CECX-X-C1 Modular Master Controller with CoDeSys
- affected All
Festo · CECX-X-M1 Modular Controller with CoDeSys and SoftMotion
- affected All
3S-Smart Software Solutions · CoDeSys
- unaffected 3.X
What to do
Solution: CoDeSys recommends upgrading to the latest version, which is Version 3. It can be downloaded here https://store.codesys.com/engineering/codesys.html .3S released a patch which implements a password for authentication to the device. The patch can be downloaded from the CoDeSys Download Center http://www.codesys.com/download.html . CoDeSys Version 3.X is not affected by these vulnerabilities.
Workaround: 3S also recommends the usage of standard security methods like firewalls or virtual private network (VPN) access to prevent unauthorized access to the controller.
References (7)
- http://www.codesys.com/news-events/press-releases/detail/article/sicherheitsluecke-in-codesys-v23-laufzeitsystem.html (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-01 (opens in a new tab)
- http://www.digitalbond.com/tools/basecamp/3s-codesys/ (opens in a new tab)x_refsource_MISCx_transferred
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-084-01 (opens in a new tab)
- https://us.codesys.com/ecosystem/security/ (opens in a new tab)
- http://ics-cert.us-cert.gov/advisories/ICSA-14-084-01 (opens in a new tab)x_refsource_MISCx_transferred
- http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-01.pdf (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .