CVE-2012-4705
Published Feb 24, 2013
Last updated 11 years ago
Overview
- Description
- Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-22
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBDE03A6-E0DB-4F26-9787-5645D8CB5B24",
"versionEndIncluding": "2.3.9.20"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39D74F9E-C823-4410-9808-0BE4D539C58A"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F43CF01-BA5C-4019-AFCC-94F1870FF797"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A96F44BD-13FD-4F8D-819A-E8FE1540AD81"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "752184AF-4778-42CA-9A4C-C726143DB5AF"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDB0A643-941B-4CB7-AB18-450C2657A46C"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DB71617-0CF5-4AB6-A402-A0C618AE5808"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB8318B0-E4FB-4C61-AD99-C3637FE2BF0D"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCB6D6EE-1ABB-490A-95EE-A78DAA608D2E"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9417285-52FE-445C-9072-0BA347A24E40"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "414ED2C5-CB35-477B-81AD-0E59AF4D25A3"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FA2C659-888F-40EF-96EB-D352E755F343"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EF459E4-47EC-498C-82A5-50C8DD3127B0"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6319826B-AAF2-4789-A0FD-D90F11065E03"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.9.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD9184C3-EC1D-4890-AB02-C48BB8D81960"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.9.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E09E0E1-F8A9-4DEA-85A4-615E3B0F02BA"
},
{
"criteria": "cpe:2.3:a:3s-software:codesys_gateway-server:2.3.9.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56974039-888C-45E8-9648-D0E38F72E439"
}
],
"operator": "OR"
}
]
}
]