CVE-2023-37551
CODESYS Files or Directories Accessible to External Parties in CmpApp
- State
- Published
- Severity
- 6.5 Medium
- Published
- Aug 3, 2023
- Updated
- Oct 11, 2024
- Reserved
- Jul 7, 2023
Description
In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to download files with any file extensions to the controller. In contrast to the regular file download via CmpFileTransfer, no filtering of certain file types is performed here. As a result, the integrity of the CODESYS control runtime system may be compromised by the files loaded onto the controller.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | CERTVDE |
Weaknesses
- CWE-552 Files or Directories Accessible to External Parties
Affected Products
| Product | Versions |
|---|---|
CODESYS Control for BeagleBone SLCODESYS |
|
CODESYS Control for emPC-A/iMX6 SLCODESYS |
|
CODESYS Control for IOT2000 SLCODESYS |
|
CODESYS Control for Linux SLCODESYS |
|
CODESYS Control for PFC100 SLCODESYS |
|
CODESYS Control for PFC200 SLCODESYS |
|
CODESYS Control for PLCnext SLCODESYS |
|
CODESYS Control for Raspberry Pi SLCODESYS |
|
CODESYS Control for WAGO Touch Panels 600 SLCODESYS |
|
CODESYS Control RTE (for Beckhoff CX) SLCODESYS |
|
CODESYS Control RTE (SL)CODESYS |
|
CODESYS Control Runtime System ToolkitCODESYS |
|
CODESYS Control Win (SL)CODESYS |
|
CODESYS Development System V3CODESYS |
|
CODESYS HMI (SL)CODESYS |
|
CODESYS Safety SIL2 Runtime ToolkitCODESYS |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.