8.8
Élevée
CVE-2023-3663 In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an…
Description
In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CODESYS Development System 3.5 | 3.5.11.20 → < 3.5.19.20 | 3.5.19.20 |
Références
- cert.vde.com cert.vde.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de CODESYS Development System
Les 8 CVE de CODESYS Development System →
CVE-2026-44469
The affected product extracts installation files to a temporary directory with incorrect default permissions during…
8.5
Élevée
CVE-2026-44468
The affected product creates a directory with insecure default permissions during administrative installation
8.5
Élevée
CVE-2025-41700
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated…
7.8
Élevée
CVE-2023-3669
A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have…
3.3
Faible