7.8
High
CVE-2023-49675 An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash…
Description
An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS Development System V2.3 2.3 | earliest → < 2.3.9.73 | 2.3.9.73 |
| development_system | 2.3 | No fix stated |