Skip to content
OpenAdvisories
High VDE-2023-024 1 CVE

CODESYS: Vulnerability in CODESYS Development System and CODESYS Scripting

Published Jul 28, 2023 · Updated Jul 28, 2023

Vendor: CODESYS Product: Development System Product: Scripting

Summary

In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

Details

Impact
Please consult CODESYS Security Advisory 2023-09 for more details.

Remediation
Update CODESYS Development System to version 3.5.17.0 .

Update CODESYS Scripting to version 4.1.0.0 .

This version can be downloaded and installed directly with the CODESYS Installer.
A CODESYS DevelopmentSystem version of 3.5.17.0 is required.

Alternatively, you can visit the CODESYS update area for more information on how to obtain the softwareupdate.

Vulnerabilities 1

  • High 7.3
    CVE-2023-3670

    Codesys: Vulnerability in CODESYS Development System and CODESYS Scripting

    In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by l…

    CODESYS CODESYS Development System CODESYS Scripting ICS / OT

Revision history

  1. #1.0.0

    Initial revision.

References