3s-software kayıtları
3s-software üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %7,7
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-287 Improper Authentication2
- CWE-121 Stack-based Buffer Overflow1
- CWE-189 Numeric Errors1
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-23 Relative Path Traversal1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
59Planlayın | CVE-2012-4705Silahlaştırılmış | Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors3s-software · codesys gateway-server · CWE-22 | Kritik10,0 | — | %64,9 | 24 Şub 2013 |
42Planlayın | CVE-2012-4708İstismar yok | Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted pac3s-software · codesys gateway-server · CWE-119 | Kritik10,0 | — | %7,4 | 24 Şub 2013 |
41Planlayın | CVE-2012-6068İstismar yok | 3S CoDeSys Improper Access Control3s-software · codesys runtime system · CWE-284 | Kritik9,8 | — | %5,3 | 21 Oca 2013 |
41Planlayın | CVE-2012-4704İstismar yok | Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.3s-software · codesys gateway-server · CWE-20 | Kritik10,0 | — | %4,2 | 24 Şub 2013 |
41Planlayın | CVE-2013-2781İstismar yok | Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service (3s-software · codesys gateway-server · CWE-399 | Kritik10,0 | — | %3,8 | 23 May 2013 |
41Planlayın | CVE-2012-4707İstismar yok | 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory3s-software · codesys gateway-server · CWE-94 | Kritik10,0 | — | %3,6 | 24 Şub 2013 |
41Planlayın | CVE-2012-6069İstismar yok | 3S CoDeSys Relative Path Traversal3s-software · codesys runtime system · CWE-23 | Kritik10,0 | — | %2,6 | 21 Oca 2013 |
40Planlayın | CVE-2018-5440İstismar yok | A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server.3s-software · codesys runtime system · CWE-121 | Kritik9,8 | — | %3,1 | 15 Şub 2018 |
38İzleyin | CVE-2014-0760İstismar yok | Festo CECX-X-(C1/M1) Controller Improper Authenticationfesto · cecx-x-c1 modular master controller · CWE-287 | Kritik9,3 | — | %3,3 | 25 Nis 2014 |
38İzleyin | CVE-2014-0769İstismar yok | Festo CECX-X-(C1/M1) Controller Improper Authenticationfesto · cecx-x-m1 modular controller · CWE-287 | Kritik9,3 | — | %2,3 | 25 Nis 2014 |
31İzleyin | CVE-2012-4706İstismar yok | Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted pac3s-software · codesys gateway-server · CWE-189 | Yüksek7,8 | — | %1,6 | 24 Şub 2013 |
21İzleyin | CVE-2014-0757İstismar yok | Smart Software Solutions (3S) CoDeSys Runtime Toolkit NULL Pointer Dereference3s-software · codesys runtime toolkit · CWE-476 | Orta5,0 | — | %3,2 | 31 Oca 2014 |
21İzleyin | CVE-2015-6482İstismar yok | Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer deref3s-software · codesys runtime system | Orta5,0 | — | %2,1 | 18 Eki 2015 |
- CVE-2012-470559Planlayın
Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors
KritikCVSS 10,0SilahlaştırılmışEPSS %653s-software · codesys gateway-server24 Şub 2013
- CVE-2012-470842Planlayın
Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted pac
KritikCVSS 10,0İstismar yokEPSS %73s-software · codesys gateway-server24 Şub 2013
- CVE-2012-606841Planlayın
3S CoDeSys Improper Access Control
KritikCVSS 9,8İstismar yokEPSS %53s-software · codesys runtime system21 Oca 2013
- CVE-2012-470441Planlayın
Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.
KritikCVSS 10,0İstismar yokEPSS %43s-software · codesys gateway-server24 Şub 2013
- CVE-2013-278141Planlayın
Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service (
KritikCVSS 10,0İstismar yokEPSS %43s-software · codesys gateway-server23 May 2013
- CVE-2012-470741Planlayın
3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory
KritikCVSS 10,0İstismar yokEPSS %43s-software · codesys gateway-server24 Şub 2013
- CVE-2012-606941Planlayın
3S CoDeSys Relative Path Traversal
KritikCVSS 10,0İstismar yokEPSS %33s-software · codesys runtime system21 Oca 2013
- CVE-2018-544040Planlayın
A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server.
KritikCVSS 9,8İstismar yokEPSS %33s-software · codesys runtime system15 Şub 2018
- CVE-2014-076038İzleyin
Festo CECX-X-(C1/M1) Controller Improper Authentication
KritikCVSS 9,3İstismar yokEPSS %3festo · cecx-x-c1 modular master controller25 Nis 2014
- CVE-2014-076938İzleyin
Festo CECX-X-(C1/M1) Controller Improper Authentication
KritikCVSS 9,3İstismar yokEPSS %2festo · cecx-x-m1 modular controller25 Nis 2014
- CVE-2012-470631İzleyin
Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted pac
YüksekCVSS 7,8İstismar yokEPSS %23s-software · codesys gateway-server24 Şub 2013
- CVE-2014-075721İzleyin
Smart Software Solutions (3S) CoDeSys Runtime Toolkit NULL Pointer Dereference
OrtaCVSS 5,0İstismar yokEPSS %33s-software · codesys runtime toolkit31 Oca 2014
- CVE-2015-648221İzleyin
Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer deref
OrtaCVSS 5,0İstismar yokEPSS %23s-software · codesys runtime system18 Eki 2015