{"id":"CVE-2018-25048","aliases":["EUVD-2018-13817","GHSA-4wf9-5wgg-q5qq"],"status":"published","title":"Codesys Runtime  Improper Limitation of a Pathname","description":"The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01022,"percentile":0.63714,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2023-03-23T10:45:36Z","modified":"2026-06-17T01:54:36Z","products":[{"vendor":"codesys","product":"control for beaglebone"},{"vendor":"codesys","product":"control for empc-a/imx6"},{"vendor":"codesys","product":"control for iot2000"},{"vendor":"codesys","product":"control for pfc100"},{"vendor":"codesys","product":"control for pfc200"},{"vendor":"codesys","product":"control for raspberry pi"},{"vendor":"codesys","product":"control rte v3 (all variants)"},{"vendor":"codesys","product":"control v3 runtime system toolkit"},{"vendor":"codesys","product":"control win v3 (all variants)"},{"vendor":"codesys","product":"control_for_beaglebone"},{"vendor":"codesys","product":"control_for_empc-a\\/imx6"},{"vendor":"codesys","product":"control_for_iot2000"},{"vendor":"codesys","product":"control_for_pfc100"},{"vendor":"codesys","product":"control_for_pfc200"},{"vendor":"codesys","product":"control_for_raspberry_pi"},{"vendor":"codesys","product":"control_rte"},{"vendor":"codesys","product":"control_v3_runtime_system_toolkit"},{"vendor":"codesys","product":"control_win"},{"vendor":"codesys","product":"embedded_target_visu_toolkit"},{"vendor":"codesys","product":"hmi"},{"vendor":"codesys","product":"hmi v3 (all variants)"},{"vendor":"codesys","product":"remote_target_visu_toolkit"},{"vendor":"codesys","product":"runtime plcwinnt"},{"vendor":"codesys","product":"runtime toolkit 32 bit embedded"},{"vendor":"codesys","product":"runtime toolkit 32 bit full"},{"vendor":"codesys","product":"runtime_plcwinnt"},{"vendor":"codesys","product":"runtime_system_toolkit"},{"vendor":"codesys","product":"simulation_runtime"},{"vendor":"codesys","product":"v3 embedded target visu toolkit"},{"vendor":"codesys","product":"v3 remote target visu (all variants)"},{"vendor":"codesys","product":"v3 remote target visu toolkit"},{"vendor":"codesys","product":"v3 simulation runtime (part of the codesys development system)"}],"references":[{"url":"https://customers.codesys.com/fileadmin/data/customers/security/2018/Advisory2018-04_CDS-59017.pdf","tags":["x_transferred","Not Applicable"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25048"},{"url":"https://github.com/advisories/GHSA-4wf9-5wgg-q5qq"}],"sources":{"cve":[{"id":"CVE-2018-25048","title":"Codesys Runtime  Improper Limitation of a Pathname","description":"The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.","status":"published","published":"2023-03-23T10:45:36.9Z","modified":"2025-02-19T21:00:29.711Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:35:02.289647Z"}],"euvd":[{"id":"EUVD-2018-13817","description":"The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.","status":"published","published":"2023-03-23T10:45:36Z","modified":"2025-02-19T21:00:29Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:26.792701Z"}],"ghsa":[{"id":"GHSA-4wf9-5wgg-q5qq","title":"The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a...","description":"The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.","status":"published","published":"2023-03-23T12:30:15Z","modified":"2023-03-23T12:30:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:54:23.567838Z"}],"nvd":[{"id":"CVE-2018-25048","description":"The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.","status":"published","published":"2023-03-23T11:15:12.73Z","modified":"2026-06-17T01:54:36.137Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:05:00.565712Z"}]}}