{"id":"CVE-2012-6068","aliases":["EUVD-2012-5942","GHSA-hh9j-6v4h-23q7"],"status":"published","title":"3S CoDeSys Improper Access Control","description":"The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.05266,"percentile":0.92607,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264","CWE-284"],"published":"2013-01-21T21:00:00Z","modified":"2026-06-16T23:47:45Z","products":[{"vendor":"3s-smart software solutions","product":"codesys"},{"vendor":"3s-smart software solutions","product":"codesys control rte"},{"vendor":"3s-smart software solutions","product":"codesys control runtime embedded"},{"vendor":"3s-smart software solutions","product":"codesys control runtime full"},{"vendor":"3s-software","product":"codesys_runtime_system"},{"vendor":"festo","product":"cecx-x-c1 modular master controller with codesys"},{"vendor":"festo","product":"cecx-x-m1 modular controller with codesys and softmotion"}],"references":[{"url":"http://www.codesys.com/news-events/press-releases/detail/article/sicherheitsluecke-in-codesys-v23-laufzeitsystem.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-01"},{"url":"http://www.digitalbond.com/tools/basecamp/3s-codesys/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-14-084-01"},{"url":"https://us.codesys.com/ecosystem/security/"},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-084-01","tags":["x_refsource_MISC","x_transferred","US Government Resource"]},{"url":"http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-01.pdf","tags":["x_refsource_MISC","x_transferred","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6068"},{"url":"http://www.digitalbond.com/tools/basecamp/3s-codesys"},{"url":"https://us.codesys.com/ecosystem/security"},{"url":"https://github.com/advisories/GHSA-hh9j-6v4h-23q7"}],"sources":{"cve":[{"id":"CVE-2012-6068","title":"3S CoDeSys Improper Access Control","description":"The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.","status":"published","published":"2013-01-21T21:00:00Z","modified":"2025-07-02T20:12:04.89Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:34:50.94153Z"}],"euvd":[{"id":"EUVD-2012-5942","description":"The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.","status":"published","published":"2013-01-21T21:00:00Z","modified":"2025-07-02T20:12:04Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:14.284181Z"}],"ghsa":[{"id":"GHSA-hh9j-6v4h-23q7","title":"The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication,...","description":"The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to (1) execute commands via the command-line interface in the TCP listener service or (2) transfer files via requests to the TCP listener service.","status":"published","published":"2022-05-17T04:44:52Z","modified":"2025-07-02T21:32:56Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:02:53.892162Z"}],"nvd":[{"id":"CVE-2012-6068","description":"The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.","status":"published","published":"2013-01-21T21:55:01.103Z","modified":"2026-06-16T23:47:45.873Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-284","CWE-264"],"updated_at":"2026-11-02T14:02:16.958223Z"}]}}