CVE-2018-25048 Codesys Runtime Improper Limitation of a Pathname

High 8.8 Published 23 Mar 2023 Updated 19 Feb 2025

Remote low-privileged attackers can exploit path traversal in CODESYS Runtime to read, modify system files, or cause denial of service.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-25048?

CVE-2018-25048 is a high-severity path traversal vulnerability in CODESYS Control for emPC-A/iMX6, published on 23 Mar 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.

Weakness: CWE-22

Which versions are affected by CVE-2018-25048?

It affects 15 products.

Products include Codesys Control for Beaglebone, Codesys Control for Empc-A\/Imx6, Codesys Control for Iot2000, Codesys Control for Pfc100, Codesys Control for Pfc200, Codesys Control for Raspberry Pi and 9 more.

How do I fix CVE-2018-25048?

No fix has been published for CVE-2018-25048 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2018-25048 being exploited?

There is no known exploitation of CVE-2018-25048 in the wild and no public exploit code.

Sources

Also known as GHSA-4wf9-5wgg-q5qq.