CVE-2012-6069— 3S CoDeSys Relative Path Traversal

Quick assessment

Affected

3S-Smart Software Solutions CODESYS Control Runtime embedded

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

3S-Smart Software Solutions CoDeSys是德国3S-Smart Software Solutions公司的一套PLC（可编程控制器）软件编程工具。Runtime Toolkit是CoDeSys的运行时工具包。 CODESYS Runtime System 2.3.x和2.4.x版本中的Runtime Toolkit中存在目录遍历漏洞。通过TCP监听的服务请求中的‘..’，远程攻击者利用该漏洞读取，重写或创建任意文件。

CVSS 10.0 · Critical EPSS 2.64% · P86 Updated Feb 21, 2026

Possible ATT&CK Techniques 1 AI

T1567 · Exfiltration Over Web Service

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2012-6069

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

3S CoDeSys Relative Path Traversal

Source: CVE Program / CVE List V5

Vulnerability Description

The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacker to affect the availability, integrity, and confidentiality of the device.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

相对路径遍历

Source: CVE Program / CVE List V5

Vulnerability Title

CoDeSys 未明目录遍历漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
3S-Smart Software Solutions	CODESYS Control Runtime embedded	0 ~ 2.3.2.8	-
3S-Smart Software Solutions	CODESYS Control Runtime full	0 ~ 2.4.7.40	-
3S-Smart Software Solutions	CODESYS Control RTE	0 ~ 2.3.7.17	-
Festo	CECX-X-C1 Modular Master Controller with CoDeSys	All	-
Festo	CECX-X-M1 Modular Controller with CoDeSys and SoftMotion	All	-
3S-Smart Software Solutions	CoDeSys	-	-