← Back

Control V3 Runtime System Toolkit

control_v3_runtime_system_toolkit

Vendor: Codesys • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-25048
1Codesys
15Control For Beaglebone
Control For Empc A/imx6Control For Iot2000+12 more
Nov 21, 2024
Mar 23, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.
CVE-2020-12069
4Codesys
FestoPilz+1 more
64750 8100 Firmware
750 8101 Firmware750 8102 Firmware+61 more
Jun 17, 2026
Dec 26, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local a...Show more
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.Show less