7.3
High
CVE-2023-3670 In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory…
Description
In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS Development System 3.5 | 3.5.9.0 → < 3.5.17.0 | 3.5.17.0 |
| CODESYS Scripting 4.0 | 4.0.0.0 → < 4.1.0.0 | 4.1.0.0 |
Other CVEs of CODESYS Development System
The 8 CVEs of CODESYS Development System →
CVE-2026-44469
The affected product extracts installation files to a temporary directory with incorrect default permissions during…
8.5
High
CVE-2026-44468
The affected product creates a directory with insecure default permissions during administrative installation
8.5
High
CVE-2025-41700
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated…
7.8
High
CVE-2023-3669
A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have…
3.3
Low