CVE-2012-6069
3S CoDeSys Relative Path Traversal
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacker to affect the availability, integrity, and confidentiality of the device.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 3.1 | Critical10.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | Critical10.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 2.6% · top 14% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 10.0.
Weakness
Affected products
3S-Smart Software Solutions · CODESYS Control Runtime embedded
- affected < 2.3.2.8
3S-Smart Software Solutions · CODESYS Control Runtime full
- affected < 2.4.7.40
3S-Smart Software Solutions · CODESYS Control RTE
- affected < 2.3.7.17
Festo · CECX-X-C1 Modular Master Controller with CoDeSys
- affected All
Festo · CECX-X-M1 Modular Controller with CoDeSys and SoftMotion
- affected All
3S-Smart Software Solutions · CoDeSys
- unaffected 3.X
What to do
Solution: CoDeSys recommends upgrading to the latest version, which is Version 3. It can be downloaded here https://store.codesys.com/engineering/codesys.html .3S released a patch which implements a password for authentication to the device. The patch can be downloaded from the CoDeSys Download Center http://www.codesys.com/download.html . CoDeSys Version 3.X is not affected by these vulnerabilities.
Workaround: 3S also recommends the usage of standard security methods like firewalls or virtual private network (VPN) access to prevent unauthorized access to the controller.
References (8)
- http://www.codesys.com/news-events/press-releases/detail/article/sicherheitsluecke-in-codesys-v23-laufzeitsystem.html (opens in a new tab)x_refsource_CONFIRMx_transferred
- https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-01 (opens in a new tab)
- http://www.digitalbond.com/tools/basecamp/3s-codesys/ (opens in a new tab)x_refsource_MISCx_transferred
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-084-01 (opens in a new tab)
- https://us.codesys.com/ecosystem/security/ (opens in a new tab)
- 56300 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- http://ics-cert.us-cert.gov/advisories/ICSA-14-084-01 (opens in a new tab)x_refsource_MISCx_transferred
- http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-01.pdf (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .