| Package | Affected versions | Patched versions |
|---|---|---|
| control for beaglebone | ≥ 3.0.0.0, < 3.5.12.30 | 3.5.12.30 |
| control for empc-a/imx6 | ≥ 3.0.0.0, < 3.5.12.30 | 3.5.12.30 |
| control for iot2000 | ≥ 3.0.0.0, < 3.5.12.30 | 3.5.12.30 |
| control for pfc100 | ≥ 3.0.0.0, < 3.5.12.30 | 3.5.12.30 |
| control for pfc200 | ≥ 3.0.0.0, < 3.5.12.30 | 3.5.12.30 |
| control for raspberry pi | ≥ 3.0.0.0, < 3.5.12.30 | 3.5.12.30 |
| control rte | ≥ 3.0.0.0, < 3.5.12.30 | 3.5.12.30 |
| control v3 runtime system toolkit | ≥ 3.0.0.0, < 3.5.12.30 | 3.5.12.30 |
| control win | ≥ 3.0.0.0, < 3.5.12.30 | 3.5.12.30 |
| embedded target visu toolkit | ≥ 3.0, < 3.5.12.30 | 3.5.12.30 |
| hmi | ≥ 3.0, < 3.5.12.30 | 3.5.12.30 |
| remote target visu toolkit | ≥ 3.0, < 3.5.12.30 | 3.5.12.30 |
| runtime plcwinnt | ≥ 2.0.0.0, < 2.4.7.52 | 2.4.7.52 |
| runtime system toolkit | = 3.5.15.0≥ 2.0.0.0, < 2.4.7.52 | 2.4.7.52 |
| simulation runtime | ≥ 3.0.0.0, < 3.5.12.30 | 3.5.12.30 |
The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free