CVEs-PoC/2012/CVE-2012-6068.md

CVE-2012-6068

Description

The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to (1) execute commands via the command-line interface in the TCP listener service or (2) transfer files via requests to the TCP listener service.

POC

Reference

• http://www.digitalbond.com/tools/basecamp/3s-codesys/
• http://www.digitalbond.com/tools/basecamp/3s-codesys/

Github

No PoCs found on GitHub currently.