| Package | Affected versions | Patched versions |
|---|---|---|
| control for beaglebone | < 3.5.14.10 | 3.5.14.10 |
| control for empc-a/imx6 | < 3.5.14.10 | 3.5.14.10 |
| control for iot2000 | < 3.5.14.10 | 3.5.14.10 |
| control for linux | < 3.5.14.10 | 3.5.14.10 |
| control for pfc100 | < 3.5.14.10 | 3.5.14.10 |
| control for pfc200 | < 3.5.14.10 | 3.5.14.10 |
| control for raspberry pi | < 3.5.14.10 | 3.5.14.10 |
| control rte | ≥ 3.5.13.0, < 3.5.14.10≥ 3.5.8.60, < 3.5.12.80 | 3.5.14.103.5.12.80 |
| control runtime system toolkit | ≥ 3.0, < 3.5.12.80 | 3.5.12.80 |
| control win | ≥ 3.5.13.0, < 3.5.14.10≥ 3.5.9.80, ≤ 3.5.12.80 | 3.5.14.10 |
| embedded target visu toolkit | ≥ 3.0, < 3.5.12.80 | 3.5.12.80 |
| hmi | ≥ 3.5.10.0, < 3.5.12.80≥ 3.5.13.0, < 3.5.14.10 | 3.5.12.803.5.14.10 |
| remote target visu toolkit | ≥ 3.0, < 3.5.12.80 | 3.5.12.80 |
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free