ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-25048

—
CVSS 3.1
8.8 high
EPSS
1%p61
Published
()
Modified
Description

The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.

Vendors
codesys
Products
control for beaglebone, control for empc-a\/imx6, control for iot2000, control for pfc100, control for pfc200, control for raspberry pi, control rte, control v3 runtime system toolkit, control win, embedded target visu toolkit, hmi, remote target visu toolkit
Weakness
CWE-22
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news

No ingested article mentions this CVE yet.