CVE:CVE-2018-25048
CNNVD:CNNVD-202303-1852
3s-smart Software Solutions CODESYS是德国德国3S智能软件系统方案有限公司（3s-smart Software Solutions）公司的一套控制器开发系统
3s-smart Software Solutions CODESYS存在路径遍历漏洞，该漏洞源于允许远程低权限攻击者利用路径遍历漏洞访问和修改所有系统文件并对设备进行DoS攻击。
solution:Upgrade codesys control_for_beaglebone to a higher version than 3.5.12.30,and avoid the version [3.0.0.0,3.5.12.30); Upgrade codesys control_for_empc-a/imx6 to a higher version than 3.5.12.30,and avoid the version [3.0.0.0,3.5.12.30); Upgrade codesys control_for_iot2000 to a higher version than 3.5.12.30,and avoid the version [3.0.0.0,3.5.12.30); Upgrade codesys control_for_pfc100 to a higher version than 3.5.12.30,and avoid the version [3.0.0.0,3.5.12.30); Upgrade codesys control_for_pfc200 to a higher version than 3.5.12.30,and avoid the version [3.0.0.0,3.5.12.30); Upgrade codesys control_for_raspberry_pi to a higher version than 3.5.12.30,and avoid the version [3.0.0.0,3.5.12.30); Upgrade codesys control_rte to a higher version than 3.5.12.30,and avoid the version [3.0.0.0,3.5.12.30); Upgrade codesys control_v3_runtime_system_toolkit to a higher version than 3.5.12.30,and avoid the version [3.0.0.0,3.5.12.30); Upgrade codesys control_win to a higher version than 3.5.12.30,and avoid the version [3.0.0.0,3.5.12.30); Upgrade codesys embedded_target_visu_toolkit to a higher version than 3.5.12.30,and avoid the version [3.0,3.5.12.30); Upgrade codesys hmi to a higher version than 3.5.12.30,and avoid the version [3.0,3.5.12.30); Upgrade codesys remote_target_visu_toolkit to a higher version than 3.5.12.30,and avoid the version [3.0,3.5.12.30); Upgrade codesys runtime_plcwinnt to a higher version than 2.4.7.52,and avoid the version [2.0.0.0,2.4.7.52); Upgrade codesys runtime_system_toolkit to a higher version than 2.4.7.52,3.5.15.0,and avoid the version [2.0.0.0,2.4.7.52),3.5.15.0; Upgrade codesys simulation_runtime to a higher version than 3.5.12.30,and avoid the version [3.0.0.0,3.5.12.30)