critical10.0Public exploit code
CVE-2012-4705
Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafte…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CADA 3S CoDeSys Gateway Server - Directory Traversal (Metasploit)2013-02-02 · local · windows · Verified
Impact
Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 3s-Software | Codesys Gateway-Server | through 2.3.9.20 Versions 2.3.5.1, 2.3.5.2, 2.3.5.3, 2.3.6.0, 2.3.7.0 |