Approved changes feed: RSS · Atom

cpe:2.3:a:3s-software:codesys_runtime_system:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor3S Software (aa21f12f-01c4-51fd-9aee-cd051a3d9dc0)
ProductCodesys Runtime System (a15b8469-f9c7-596a-aad9-304bc446cced)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0769 vulnerable 2026-06-08 05:05:14.265073 Festo CECX-X-(C1/M1) Controller Improper Authentication
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.
Published: 2014-04-25T01:00:00.000Z
Updated: 2025-07-02T20:26:44.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0760 vulnerable 2026-06-08 05:05:14.248075 Festo CECX-X-(C1/M1) Controller Improper Authentication
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Published: 2014-04-25T01:00:00.000Z
Updated: 2025-07-02T20:29:50.796Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.