Vulnerability Spotlight: Code execution vulnerability in 3S CODESYS

Summary: Cisco Talos discovered an exploitable code execution vulnerability in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30, which lets any embedded or PC device act as an IEC 61131-3-compliant industrial controller. A specially crafted network request can trigger remote code execution, and Talos confirmed version 3.5.14.30 is affected, tracked as TALOS-2020-1003/CVE-2020-6081, with Snort rule 53010 available to detect exploitation attempts.
Key Takeaway: A single malicious packet to a CODESYS runtime can execute code on the device running it, and Talos confirmed the flaw in version 3.5.14.30 - so any industrial controller built on that runtime is exposed until the update 3S issued is applied.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-6081
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026