5.5
Medium
CVE-2023-49676 An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use…
Description
An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS Development System V2.3 2.3 | earliest → < 2.3.9.73 | 2.3.9.73 |