Vulnerability-Lookup

CVE-2011-5058 (GCVE-0-2011-5058)

Vulnerability from cvelistv5 – Published: 2012-01-10 23:00 – Updated: 2024-08-07 00:23

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

4 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.us-cert.gov/control_systems/pdf/ICS-AL…	x_refsource_MISC
http://secunia.com/advisories/47018	third-party-advisoryx_refsource_SECUNIA
http://aluigi.altervista.org/adv/codesys_1-adv.txt	x_refsource_MISC

Date Public

2011-11-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:23:39.866Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "codesys-cmbwebserver-dir-traversal(72339)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
          },
          {
            "name": "47018",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/47018"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-11-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "codesys-cmbwebserver-dir-traversal(72339)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
        },
        {
          "name": "47018",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/47018"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-5058",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "codesys-cmbwebserver-dir-traversal(72339)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
            },
            {
              "name": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf",
              "refsource": "MISC",
              "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
            },
            {
              "name": "47018",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/47018"
            },
            {
              "name": "http://aluigi.altervista.org/adv/codesys_1-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-5058",
    "datePublished": "2012-01-10T23:00:00.000Z",
    "dateReserved": "2012-01-10T00:00:00.000Z",
    "dateUpdated": "2024-08-07T00:23:39.866Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2011-5058",
      "date": "2026-10-06",
      "epss": "0.01764",
      "percentile": "0.77307"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:3ssoftware:codesys:3.4:sp4:patch2:*:*:*:*:*",
                  "matchCriteriaId": "34BDD287-3548-4530-9CE3-0EF065BAA8EA",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request."
        },
        {
          "lang": "es",
          "value": "El m\u00f3dulo CmbWebserver.dll del servicio de control de 3S CoDeSys v3.4 SP4 Patch 2 permite a atacantes remotos crear en la ra\u00edz web mediante la especificaci\u00f3n de un directorio inexistente utilizando caracteres \\ (barra invertida) en una petici\u00f3n HTTP GET."
        }
      ],
      "id": "CVE-2011-5058",
      "lastModified": "2024-11-21T01:33:31.660",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 6.4,
              "confidentialityImpact": "NONE",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 4.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2012-01-10T23:55:00.977",
      "references": [
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit"
          ],
          "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/47018"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit"
          ],
          "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/47018"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-264"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:3ssoftware:codesys:3.4:sp4:patch2:*:*:*:*:*",
                    "matchCriteriaId": "34BDD287-3548-4530-9CE3-0EF065BAA8EA",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request."
          },
          {
            "lang": "es",
            "value": "El m\u00f3dulo CmbWebserver.dll del servicio de control de 3S CoDeSys v3.4 SP4 Patch 2 permite a atacantes remotos crear en la ra\u00edz web mediante la especificaci\u00f3n de un directorio inexistente utilizando caracteres \\ (barra invertida) en una petici\u00f3n HTTP GET."
          }
        ],
        "id": "CVE-2011-5058",
        "lastModified": "2026-04-29T01:13:23.040",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.4,
                "confidentialityImpact": "NONE",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 4.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2012-01-10T23:55:00.977",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit"
            ],
            "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/47018"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/47018"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-264"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

FKIE_CVE-2011-5058

Vulnerability from fkie_nvd - Published: 2012-01-10 23:55 - Updated: 2026-06-16 23:35

Severity

Summary

References

URL	Tags
cve@mitre.org	http://aluigi.altervista.org/adv/codesys_1-adv.txt	Exploit
cve@mitre.org	http://secunia.com/advisories/47018	Vendor Advisory
cve@mitre.org	http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf	US Government Resource
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/72339
af854a3a-2127-422b-91ae-364da2661108	http://aluigi.altervista.org/adv/codesys_1-adv.txt	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/47018	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/72339

Impacted products

	Vendor	Product	Version
	3ssoftware	codesys	3.4

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:3ssoftware:codesys:3.4:sp4:patch2:*:*:*:*:*",
              "matchCriteriaId": "34BDD287-3548-4530-9CE3-0EF065BAA8EA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request."
    },
    {
      "lang": "es",
      "value": "El m\u00f3dulo CmbWebserver.dll del servicio de control de 3S CoDeSys v3.4 SP4 Patch 2 permite a atacantes remotos crear en la ra\u00edz web mediante la especificaci\u00f3n de un directorio inexistente utilizando caracteres \\ (barra invertida) en una petici\u00f3n HTTP GET."
    }
  ],
  "id": "CVE-2011-5058",
  "lastModified": "2026-06-16T23:35:51.747",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.4,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2012-01-10T23:55:00.977",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/47018"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/47018"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-5R62-RXFJ-5682

Vulnerability from github – Published: 2022-05-17 01:51 – Updated: 2022-05-17 01:51

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2011-5058"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2012-01-10T23:55:00Z",
    "severity": "MODERATE"
  },
  "details": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request.",
  "id": "GHSA-5r62-rxfj-5682",
  "modified": "2022-05-17T01:51:11Z",
  "published": "2022-05-17T01:51:11Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-5058"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
    },
    {
      "type": "WEB",
      "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/47018"
    },
    {
      "type": "WEB",
      "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2011-5058

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2011-5058

Aliases

CVE-2011-5058

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2011-5058",
    "description": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request.",
    "id": "GSD-2011-5058"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2011-5058"
      ],
      "details": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request.",
      "id": "GSD-2011-5058",
      "modified": "2023-12-13T01:19:08.829455Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2011-5058",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "codesys-cmbwebserver-dir-traversal(72339)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
          },
          {
            "name": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf",
            "refsource": "MISC",
            "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
          },
          {
            "name": "47018",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/47018"
          },
          {
            "name": "http://aluigi.altervista.org/adv/codesys_1-adv.txt",
            "refsource": "MISC",
            "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:3ssoftware:codesys:3.4:sp4:patch2:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-5058"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-264"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "47018",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/47018"
            },
            {
              "name": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf",
              "refsource": "MISC",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf"
            },
            {
              "name": "http://aluigi.altervista.org/adv/codesys_1-adv.txt",
              "refsource": "MISC",
              "tags": [
                "Exploit"
              ],
              "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
            },
            {
              "name": "codesys-cmbwebserver-dir-traversal(72339)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.4,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 4.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-08-29T01:30Z",
      "publishedDate": "2012-01-10T23:55Z"
    }
  }
}

VAR-201201-0095

Vulnerability from variot - Updated: 2023-12-18 12:52

The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ (backslash) characters in an HTTP GET request. CoDeSys is a hardware-independent IEC 61131-3 development system for programming and creating controller applications on the Windows platform. By sending a specially crafted request to TCP port 8080, a remote attacker can be allowed to create any directory under Webroot. CoDeSys is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. ----------------------------------------------------------------------

Secunia is hiring!

Find your next job here:

http://secunia.com/company/jobs/

TITLE: CoDeSys Multiple Vulnerabilities

SECUNIA ADVISORY ID: SA47018

VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/47018/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=47018

RELEASE DATE: 2011-12-01

DISCUSS ADVISORY: http://secunia.com/advisories/47018/#comments

AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)

http://secunia.com/advisories/47018/

ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS

https://ca.secunia.com/?page=viewadvisory&vuln_id=47018

ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING

http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

DESCRIPTION: Luigi Auriemma has discovered multiple vulnerabilities in CoDeSys, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system.

1) An integer overflow error in the Gateway service when processing certain requests can be exploited to cause a heap-based buffer overflow via a specially crafted packet sent to TCP port 1217.

2) A boundary error in the Control service when processing web requests can be exploited to cause a stack-based buffer overflow via an overly long URL sent to TCP port 8080.

Successful exploitation of vulnerabilities #1 and #2 allows execution of arbitrary code.

The vulnerabilities are confirmed in version 3.4 SP4 Patch 2. Other versions may also be affected.

SOLUTION: Restrict access to trusted hosts only.

PROVIDED AND/OR DISCOVERED BY: Luigi Auriemma

ORIGINAL ADVISORY: http://aluigi.altervista.org/adv/codesys_1-adv.txt

OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201201-0095",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "codesys",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "3ssoftware",
        "version": "3.4"
      },
      {
        "model": "codesys",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "3s smart",
        "version": "3.4 sp4 patch 2"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.6,
        "vendor": "codesys",
        "version": "3.4"
      },
      {
        "model": "codesys",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "3s smart",
        "version": "2.3.9.32"
      },
      {
        "model": "codesys",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "3s smart",
        "version": "3.5"
      },
      {
        "model": "codesys sp4 patch2",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "3ssoftware",
        "version": "3.4"
      },
      {
        "model": "codesys sp4 patch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "3s",
        "version": "3.42"
      },
      {
        "model": "codesys",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "3s",
        "version": "2.3"
      },
      {
        "model": "codesys",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "3s",
        "version": "3.5"
      },
      {
        "model": "codesys",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "3s",
        "version": "2.3.9.32"
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132"
      },
      {
        "db": "IVD",
        "id": "7d719330-463f-11e9-82b9-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "3b396c4c-2354-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-9240"
      },
      {
        "db": "BID",
        "id": "56732"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001049"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-5058"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-116"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:3ssoftware:codesys:3.4:sp4:patch2:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2011-5058"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Luigi Auriemma",
    "sources": [
      {
        "db": "BID",
        "id": "56732"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2011-5058",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.4,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "impactScore": 4.9,
            "integrityImpact": "PARTIAL",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "MEDIUM",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Low",
            "accessVector": "Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Partial",
            "baseScore": 6.4,
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2011-5058",
            "impactScore": null,
            "integrityImpact": "Partial",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "Medium",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "NONE",
            "baseScore": 6.4,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2012-9240",
            "impactScore": 4.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.4,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132",
            "impactScore": 4.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.2,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "version": "2.9 [IVD]"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "NONE",
            "baseScore": 6.4,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "7d719330-463f-11e9-82b9-000c29342cb1",
            "impactScore": 4.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.2,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.9 [IVD]"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "NONE",
            "baseScore": 6.4,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "3b396c4c-2354-11e6-abef-000c29c66e3d",
            "impactScore": 4.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.2,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "version": "2.9 [IVD]"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2011-5058",
            "trust": 1.8,
            "value": "MEDIUM"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2012-9240",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201201-116",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "IVD",
            "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132",
            "trust": 0.2,
            "value": "MEDIUM"
          },
          {
            "author": "IVD",
            "id": "7d719330-463f-11e9-82b9-000c29342cb1",
            "trust": 0.2,
            "value": "MEDIUM"
          },
          {
            "author": "IVD",
            "id": "3b396c4c-2354-11e6-abef-000c29c66e3d",
            "trust": 0.2,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132"
      },
      {
        "db": "IVD",
        "id": "7d719330-463f-11e9-82b9-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "3b396c4c-2354-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-9240"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001049"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-5058"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-116"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request. CoDeSys is a hardware-independent IEC 61131-3 development system for programming and creating controller applications on the Windows platform. By sending a specially crafted request to TCP port 8080, a remote attacker can be allowed to create any directory under Webroot. CoDeSys is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. ----------------------------------------------------------------------\n\nSecunia is hiring!\n\nFind your next job here:\n\nhttp://secunia.com/company/jobs/\n\n----------------------------------------------------------------------\n\nTITLE:\nCoDeSys Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA47018\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/47018/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=47018\n\nRELEASE DATE:\n2011-12-01\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/47018/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/47018/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=47018\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nLuigi Auriemma has discovered multiple vulnerabilities in CoDeSys,\nwhich can be exploited by malicious people to cause a DoS (Denial of\nService) and compromise a vulnerable system. \n\n1) An integer overflow error in the Gateway service when processing\ncertain requests can be exploited to cause a heap-based buffer\noverflow via a specially crafted packet sent to TCP port 1217. \n\n2) A boundary error in the Control service when processing web\nrequests can be exploited to cause a stack-based buffer overflow via\nan overly long URL sent to TCP port 8080. \n\nSuccessful exploitation of vulnerabilities #1 and #2 allows execution\nof arbitrary code. \n\nThe vulnerabilities are confirmed in version 3.4 SP4 Patch 2. Other\nversions may also be affected. \n\nSOLUTION:\nRestrict access to trusted hosts only. \n\nPROVIDED AND/OR DISCOVERED BY:\nLuigi Auriemma\n\nORIGINAL ADVISORY:\nhttp://aluigi.altervista.org/adv/codesys_1-adv.txt\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2011-5058"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001049"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-9240"
      },
      {
        "db": "BID",
        "id": "56732"
      },
      {
        "db": "IVD",
        "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132"
      },
      {
        "db": "IVD",
        "id": "7d719330-463f-11e9-82b9-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "3b396c4c-2354-11e6-abef-000c29c66e3d"
      },
      {
        "db": "PACKETSTORM",
        "id": "107457"
      }
    ],
    "trust": 3.6
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2011-5058",
        "trust": 4.5
      },
      {
        "db": "SECUNIA",
        "id": "47018",
        "trust": 2.9
      },
      {
        "db": "ICS CERT ALERT",
        "id": "ICS-ALERT-11-336-01A",
        "trust": 2.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-116",
        "trust": 1.2
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-9240",
        "trust": 1.0
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7227",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001049",
        "trust": 0.8
      },
      {
        "db": "BID",
        "id": "56732",
        "trust": 0.3
      },
      {
        "db": "IVD",
        "id": "83FF60FD-8B4E-482A-8BA9-24FE24EEB132",
        "trust": 0.2
      },
      {
        "db": "IVD",
        "id": "7D719330-463F-11E9-82B9-000C29342CB1",
        "trust": 0.2
      },
      {
        "db": "IVD",
        "id": "3B396C4C-2354-11E6-ABEF-000C29C66E3D",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "107457",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132"
      },
      {
        "db": "IVD",
        "id": "7d719330-463f-11e9-82b9-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "3b396c4c-2354-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-9240"
      },
      {
        "db": "BID",
        "id": "56732"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001049"
      },
      {
        "db": "PACKETSTORM",
        "id": "107457"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-5058"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-116"
      }
    ]
  },
  "id": "VAR-201201-0095",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "IVD",
        "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132"
      },
      {
        "db": "IVD",
        "id": "7d719330-463f-11e9-82b9-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "3b396c4c-2354-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-9240"
      }
    ],
    "trust": 2.615404046666667
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132"
      },
      {
        "db": "IVD",
        "id": "7d719330-463f-11e9-82b9-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "3b396c4c-2354-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-9240"
      }
    ]
  },
  "last_update_date": "2023-12-18T12:52:23.072000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Top Page",
        "trust": 0.8,
        "url": "http://www.3s-software.com/"
      },
      {
        "title": "CoDeSys Control service CmbWebserver.dll module directory traversal vulnerability patch",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchinfo/show/25815"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001049"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-264",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001049"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-5058"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.7,
        "url": "http://www.us-cert.gov/control_systems/pdf/ics-alert-11-336-01a.pdf"
      },
      {
        "trust": 2.2,
        "url": "http://secunia.com/advisories/47018"
      },
      {
        "trust": 2.0,
        "url": "http://aluigi.altervista.org/adv/codesys_1-adv.txt"
      },
      {
        "trust": 1.0,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72339"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-5058"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-5058"
      },
      {
        "trust": 0.6,
        "url": "http://secunia.com/advisories/47018http"
      },
      {
        "trust": 0.3,
        "url": "http://www.3s-software.com/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/company/jobs/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_intelligence/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/about_secunia_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/personal/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=47018"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/47018/#comments"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/47018/"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-9240"
      },
      {
        "db": "BID",
        "id": "56732"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001049"
      },
      {
        "db": "PACKETSTORM",
        "id": "107457"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-5058"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-116"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "IVD",
        "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132"
      },
      {
        "db": "IVD",
        "id": "7d719330-463f-11e9-82b9-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "3b396c4c-2354-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-9240"
      },
      {
        "db": "BID",
        "id": "56732"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-001049"
      },
      {
        "db": "PACKETSTORM",
        "id": "107457"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-5058"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-116"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-12-04T00:00:00",
        "db": "IVD",
        "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132"
      },
      {
        "date": "2012-01-13T00:00:00",
        "db": "IVD",
        "id": "7d719330-463f-11e9-82b9-000c29342cb1"
      },
      {
        "date": "2012-01-13T00:00:00",
        "db": "IVD",
        "id": "3b396c4c-2354-11e6-abef-000c29c66e3d"
      },
      {
        "date": "2012-12-04T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      },
      {
        "date": "2012-01-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-9240"
      },
      {
        "date": "2011-11-29T00:00:00",
        "db": "BID",
        "id": "56732"
      },
      {
        "date": "2012-01-12T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-001049"
      },
      {
        "date": "2011-12-01T04:30:55",
        "db": "PACKETSTORM",
        "id": "107457"
      },
      {
        "date": "2012-01-10T23:55:00.977000",
        "db": "NVD",
        "id": "CVE-2011-5058"
      },
      {
        "date": "2012-01-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201201-116"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-12-04T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      },
      {
        "date": "2012-01-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-9240"
      },
      {
        "date": "2011-11-29T00:00:00",
        "db": "BID",
        "id": "56732"
      },
      {
        "date": "2012-01-12T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-001049"
      },
      {
        "date": "2017-08-29T01:30:40.227000",
        "db": "NVD",
        "id": "CVE-2011-5058"
      },
      {
        "date": "2012-01-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201201-116"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201201-116"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "CoDeSys Control service CmbWebserver.dll Module directory traversal vulnerability",
    "sources": [
      {
        "db": "IVD",
        "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7227"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Permission permission and access control",
    "sources": [
      {
        "db": "IVD",
        "id": "83ff60fd-8b4e-482a-8ba9-24fe24eeb132"
      },
      {
        "db": "IVD",
        "id": "7d719330-463f-11e9-82b9-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "3b396c4c-2354-11e6-abef-000c29c66e3d"
      }
    ],
    "trust": 0.6
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2011-5058 (GCVE-0-2011-5058)

FKIE_CVE-2011-5058

GHSA-5R62-RXFJ-5682

GSD-2011-5058

VAR-201201-0095

Tags

Sightings

Nomenclature

Related by attack behaviour