CVE:CVE-2021-36763
CNNVD:CNNVD-202108-305
3s-smart Software Solutions 3S-Smart Software Solutions CODESYS V3 web server是德国3S-Smart Software Solutions（3s-smart Software Solutions）公司的一款使用在CODESYS产品中的Web服务器。
3S-Smart Software Solutions CODESYS V3 web server 3.5.17.10之前版本存在安全漏洞。利用该漏洞外部各方可以访问文件或目录。。
solution:Upgrade codesys control to a higher version than 4.2.0.0,4.2.0.0,and avoid the version (,4.2.0.0),(,4.2.0.0]; Upgrade codesys control_rte to a higher version than 3.5.17.10,and avoid the version (,3.5.17.10); Upgrade codesys control_runtime_system_toolkit to a higher version than 3.5.17.10,and avoid the version (,3.5.17.10); Upgrade codesys control_win_sl to a higher version than 3.5.17.10,and avoid the version (,3.5.17.10); Upgrade codesys embedded_target_visu_toolkit to a higher version than 3.5.17.10,and avoid the version (,3.5.17.10); Upgrade codesys hmi to a higher version than 3.5.17.10,and avoid the version (,3.5.17.10); Upgrade codesys remote_target_visu_toolkit to a higher version than 3.5.17.10,and avoid the version (,3.5.17.10)