High severity8.8NVD Advisory· Published Mar 23, 2023· Updated Jun 17, 2026
CVE-2018-25048
CVE-2018-25048
Description
The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.
Affected products
19- cpe:2.3:a:codesys:control_for_beaglebone:*:*:*:*:*:*:*:*Range: >=3.0.0.0,<3.5.12.30
- cpe:2.3:a:codesys:control_for_empc-a\/imx6:*:*:*:*:*:*:*:*Range: >=3.0.0.0,<3.5.12.30
- cpe:2.3:a:codesys:control_for_iot2000:*:*:*:*:*:*:*:*Range: >=3.0.0.0,<3.5.12.30
- cpe:2.3:a:codesys:control_for_pfc100:*:*:*:*:*:*:*:*Range: >=3.0.0.0,<3.5.12.30
- cpe:2.3:a:codesys:control_for_pfc200:*:*:*:*:*:*:*:*Range: >=3.0.0.0,<3.5.12.30
- cpe:2.3:a:codesys:control_for_raspberry_pi:*:*:*:*:*:*:*:*Range: >=3.0.0.0,<3.5.12.30
cpe:2.3:a:codesys:control_v3_runtime_system_toolkit:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_v3_runtime_system_toolkit:*:*:*:*:*:*:*:*range: >=3.0.0.0,<3.5.12.30
- (no CPE)range: 3.0.0.0
- cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:*Range: >=3.0,<3.5.12.30
cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*range: >=3.0,<3.5.12.30
- (no CPE)range: 3.0.0.0
- cpe:2.3:a:codesys:runtime_plcwinnt:*:*:*:*:*:*:*:*Range: >=2.0.0.0,<2.4.7.52
cpe:2.3:a:codesys:runtime_system_toolkit:*:*:*:*:*:*:x86:*+ 1 more
- cpe:2.3:a:codesys:runtime_system_toolkit:*:*:*:*:*:*:x86:*range: >=2.0.0.0,<2.4.7.52
- cpe:2.3:a:codesys:runtime_system_toolkit:3.5.15.0:*:*:*:*:*:*:*
- cpe:2.3:a:codesys:simulation_runtime:*:*:*:*:*:*:*:*Range: >=3.0.0.0,<3.5.12.30
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.