Skip to content
OpenAdvisories
High VDE-2023-021 1 CVE

CODESYS: Vulnerability in CODESYS Development System allows execution of binaries

Published Aug 3, 2023 · Updated Aug 3, 2023

Vendor: CODESYS Product: Development System

Summary

The CODESYS Development System is vulnerable to the execution of malicious binaries from the current working directory.

Details

Impact
Users could unknowingly launch a malicious binary placed by a local attacker.

Remediation
Update the CODESYS Development System to version 3.5.19.20.
The CODESYS Development System can be downloaded and installed directly with the CODESYS Installer or be downloaded from the CODESYS Store.
Alternatively, you will find further information on obtaining the software update in the CODESYS Update area

Vulnerabilities 1

  • High 7.3
    CVE-2023-3662

    CODESYS: Vulnerability in CODESYS Development System allows for execution of binaries

    In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users context .

    CODESYS CODESYS Development System ICS / OT

Revision history

  1. #1

    Initial revision.

References