CVE-2017-6027

An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A specially crafted web server request may allow the upload of arbitrary files (with a dangerous type) to the CODESYS Web Server without authorization which may allow remote code execution.

• CWE-434
• CWE-434

• http://www.securityfocus.com/bid/97174Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/97174Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02Third Party Advisory, US Government Resource

Published

May 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6021In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and…
• CVE-2017-6022A hard-coded password issue was discovered in Becton, Dickin…
• CVE-2017-6023An issue was discovered in Fatek Automation PLC Ethernet Mod…9.8
• CVE-2017-6024A Resource Exhaustion issue was discovered in Rockwell Autom…5.9
• CVE-2017-6025A Stack Buffer Overflow issue was discovered in 3S-Smart Sof…
• CVE-2017-6026A Use of Insufficiently Random Values issue was discovered i…9.1
• CVE-2017-6028An Insufficiently Protected Credentials issue was discovered…9.8
• CVE-2017-6029A Cross-Site Scripting issue was discovered in Certec EDV Gm…
• CVE-2017-6030A predictable value range from previous values issue was dis…6.5
• CVE-2017-6031A Header Injection issue was discovered in Certec EDV GmbH a…
• CVE-2017-6032A Violation of Secure Design Principles issue was discovered…
• CVE-2017-6033A DLL Hijacking issue was discovered in Schneider Electric I…