3s-software codesys runtime system

Name: 3s-software codesys runtime system
Brand: 3s-software

productUS

cpe:2.3:a:3s-software:codesys_runtime_system:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical4high1medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2012-6068US	high10.0	5.27% (93rd)	—	no fix	2013-01-21	5 versions
CVE-2014-0760US	high9.3	3.35% (89th)	—	no fix	2014-04-25	—
CVE-2018-5440US	critical9.8	3.10% (88th)	—	1.1.9.19	2018-02-15	< 1.1.9.19
CVE-2012-6069US	high10.0	2.64% (85th)	—	no fix	2013-01-21	5 versions
CVE-2014-0769US	high9.3	2.32% (83rd)	—	no fix	2014-04-25	—
CVE-2015-6482US	medium5.0	2.07% (81st)	—	no fix	2015-10-18	≤ 2.3.9.47

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-23Relative Path Traversal1 CVEs
CWE-264CWE-2641 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.