[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB3agTk00S4AhFo7BlJOV3ZDej9vYg8BNnrh6hCl0eeE":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":35,"kevVulnerabilities":88,"topProductsByCves":89,"seoMetadata":94,"meta":102},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":34},157,"3s-software",4,13,0,26,"2018-02-15","3",[16,22,26,31],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},403,"codesys_gateway-server",18,6,"2013-05-23",{"id":23,"product_name":24,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":13},404,"codesys_runtime_system",7,{"id":27,"product_name":28,"version_count":11,"cve_count":29,"kev_count":11,"last_cve_update":30},405,"codesys_runtime_toolkit",1,"2014-01-31",{"id":32,"product_name":33,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":13},406,"codesys_web_server","3s-software is a technology vendor with 4 tracked products and 13 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[36,45,49,56,60,64,70,74,80,84],{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":44},"CVE-2012-4705","Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname.","2013-02-24",10,"v2","Critical",false,0.6487,{"cveId":46,"description":47,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":48},"CVE-2012-4708","Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.",0.07427,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":42,"isKev":43,"epssScore":55},"CVE-2012-6068","The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to execute commands via the command-line interface in the TCP listener service or transfer files via requests to the TCP listener service.","2013-01-21",9.8,"v3.1",0.05266,{"cveId":57,"description":58,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":59},"CVE-2012-4704","Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet.",0.04151,{"cveId":61,"description":62,"publishedDate":21,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":63},"CVE-2013-2781","Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.",0.03799,{"cveId":65,"description":66,"publishedDate":30,"cvssScore":67,"cvssVersion":41,"severity":68,"isKev":43,"epssScore":69},"CVE-2014-0757","Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.",7.1,"High",0.0365,{"cveId":71,"description":72,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":73},"CVE-2012-4707","3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory access.",0.03562,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":79},"CVE-2014-0760","The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1\n Modular Controller with CoDeSys and SoftMotion provide an undocumented \naccess method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application \ncrash) via unspecified vectors.","2014-04-25",9.3,0.03345,{"cveId":81,"description":82,"publishedDate":13,"cvssScore":53,"cvssVersion":54,"severity":42,"isKev":43,"epssScore":83},"CVE-2018-5440","A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request may cause a buffer overflow and could therefore execute arbitrary code on the web server or lead to a denial-of-service condition due to a crash in the web server.",0.03096,{"cveId":85,"description":86,"publishedDate":52,"cvssScore":40,"cvssVersion":54,"severity":42,"isKev":43,"epssScore":87},"CVE-2012-6069","The CoDeSys Runtime Toolkit’s file transfer functionality does not \nperform input validation, which allows an attacker to access files and \ndirectories outside the intended scope. This may allow an attacker to \nupload and download any file on the device. This could allow the \nattacker to affect the availability, integrity, and confidentiality of \nthe device.",0.02637,[],[90,91,92,93],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":27,"product_name":28,"version_count":11,"cve_count":29,"kev_count":11,"last_cve_update":30},{"id":32,"product_name":33,"version_count":29,"cve_count":29,"kev_count":11,"last_cve_update":13},{"title":95,"metaDescription":96,"keywords":97,"structuredData":98},"3s-software - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for 3s-software covering 4 products with 13 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","3s-software vulnerabilities, 3s-software security, 3s-software CVE, 3s-software threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":99,"@type":100,"name":8,"description":96,"url":101},"https:\u002F\u002Fschema.org","Organization","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002F3s-software",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":103,"apiVersion":104},"2026-10-19T10:11:32.720Z","3.0"]