Codesys Control Rte V3 vulnerabilities
2 known vulnerabilities affecting codesys/control_rte_v3.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2
Vulnerabilities
Page 1 of 1
CVE-2018-25048P3HIGHCVSS 8.8≥ 3.0.0.0, < 3.5.12.302023-03-23
CVE-2018-25048 [HIGH] CWE-22 CVE-2018-25048: The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a pa
The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.
nvd
CVE-2020-12069P3HIGHCVSS 7.8fixed in 3.5.16.02022-12-26
CVE-2020-12069 [HIGH] CWE-916 CVE-2020-12069: In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Contro
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.
nvd