7.3
Élevée
CVE-2023-3670 In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory…
Description
In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CODESYS Development System 3.5 | 3.5.9.0 → < 3.5.17.0 | 3.5.17.0 |
| CODESYS Scripting 4.0 | 4.0.0.0 → < 4.1.0.0 | 4.1.0.0 |
Références
- cert.vde.com cert.vde.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de CODESYS Development System
Les 8 CVE de CODESYS Development System →
CVE-2026-44469
The affected product extracts installation files to a temporary directory with incorrect default permissions during…
8.5
Élevée
CVE-2026-44468
The affected product creates a directory with insecure default permissions during administrative installation
8.5
Élevée
CVE-2025-41700
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated…
7.8
Élevée
CVE-2023-3669
A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have…
3.3
Faible