Evil-DB LogoEvil-DB
← All CVEs

CVE-2012-4705

high · 10

Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.

10
CVSS
64.9%
EPSS (exploit prob.)
99th
EPSS percentile
2013-02-24
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-22

Affected products

VendorProductAffected versions
3s-softwarecodesys_gateway-server<= 2.3.9.20
3s-softwarecodesys_gateway-server2.3.5.1
3s-softwarecodesys_gateway-server2.3.5.2
3s-softwarecodesys_gateway-server2.3.5.3
3s-softwarecodesys_gateway-server2.3.6.0
3s-softwarecodesys_gateway-server2.3.7.0
3s-softwarecodesys_gateway-server2.3.8.0
3s-softwarecodesys_gateway-server2.3.8.1
3s-softwarecodesys_gateway-server2.3.8.2
3s-softwarecodesys_gateway-server2.3.9
3s-softwarecodesys_gateway-server2.3.9.1
3s-softwarecodesys_gateway-server2.3.9.2
3s-softwarecodesys_gateway-server2.3.9.3
3s-softwarecodesys_gateway-server2.3.9.4
3s-softwarecodesys_gateway-server2.3.9.5
3s-softwarecodesys_gateway-server2.3.9.18
3s-softwarecodesys_gateway-server2.3.9.19

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-4705