Impact to individual organizations depends on many factors that are unique to each organization. The 3S security patch covers directory traversal and memory operation restriction vulnerabilities reported to ICS-CERT by Exodus Intelligence. The following 3S CODESYS products are affected: End Update A Part 1 of 2 - Affected Products mof file in order to gain remote execution within the ICS. Rapid7 has released a Metasploit module exploiting the directory traversal vulnerability that allows arbitrary file creation that can be used to execute a. Begin Update A Part 1 of 2 -Īn exploit that targets one of these vulnerabilities is publicly available. These vulnerabilities could be exploited remotely. These vulnerabilities affect products primarily found in the energy, critical manufacturing, and industrial automation industries. The Gateway-Server is a third-party component found in multiple control systems manufacturer’s products.

Successful exploitation of these vulnerabilities could allow remote code execution. 3S has produced a security patch that mitigates these vulnerabilities. Independent researcher Aaron Portnoy of Exodus Intelligence has identified five vulnerabilities in the 3S CODESYS Gateway-Server application.

This updated advisory provides mitigation details for five vulnerabilities in the 3S-Smart Software Solutions GmbH CODESYS Gateway-Server.

This updated advisory is a follow-up to the original advisory titled ICSA-13-050-01, 3S CODESYS Gateway-Server Vulnerabilities that was published February 19, 2013, on the ICS-CERT Web page.

3s codesys