Riskcovery

CVE-2023-5751

CODESYS: Development system prone to DoS through exposure of resource to wrong sphere

State
Published
Severity
7.8 High
Published
Jun 4, 2024
Updated
Aug 2, 2024
Reserved
Oct 24, 2023

Read the record on cve.org

Description

A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCERTVDE

Weaknesses

  • CWE-668 Exposure of Resource to Wrong Sphere

Affected Products

ProductVersions
CODESYS Control Win (SL)CODESYS
  • before 3.5.20.10Affected
CODESYS Development System V3CODESYS
  • before 3.5.20.10Affected
CODESYS Edge Gateway for WindowsCODESYS
  • before 3.5.20.10Affected
CODESYS Gateway for WindowsCODESYS
  • before 3.5.20.10Affected
CODESYS HMI (SL)CODESYS
  • before 3.5.20.10Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.