Description
The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
3S-Smart Software Solutions CODESYS Control Runtime embedded
Default version status: unaffected
0 to < 2.3.2.8affected
3S-Smart Software Solutions CODESYS Control Runtime full
Default version status: unaffected
0 to < 2.4.7.40affected
3S-Smart Software Solutions CODESYS Control RTE
Default version status: unaffected
0 to < 2.3.7.17affected
Festo CECX-X-C1 Modular Master Controller with CoDeSys
Default version status: unaffected
Allaffected
Festo CECX-X-M1 Modular Controller with CoDeSys and SoftMotion
Default version status: unaffected
Allaffected
3S-Smart Software Solutions CoDeSys
Default version status: unaffected
3.Xunaffected
References
- http://www.codesys.com/news-events/press-releases/detail/article/sicherheitsluecke-in-codesys-v23-laufzeitsystem.html ↗
- https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-01 ↗
- http://www.digitalbond.com/tools/basecamp/3s-codesys/ ↗
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-084-01 ↗
- https://us.codesys.com/ecosystem/security/ ↗
- http://ics-cert.us-cert.gov/advisories/ICSA-14-084-01 ↗
- http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-01.pdf ↗