CVE-2012-6068: 3s-Software Codesys Runtime System

Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days.

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.

Affected products

• 3s-Software Codesys Runtime System: version 2.3.9.8 only; version 2.3.9.35 only; version 2.3.9.36 only; version 2.3.9.37 only; version 2.4.0 only

Published 2013-01-21. Last modified 2026-06-16.