Summary
Ein Angreifer kann mehrere Schwachstellen in CODESYS ausnutzen, um seine Privilegien zu erhöhen, um Daten zu manipulieren, und um einen Denial of Service Angriff durchzuführen.
Product
CODESYS ist eine herstellerunabhängige Automatisierungssoftware für die Entwicklung von Steuerungsanwendungen in der industriellen Automatisierung.
Vulnerabilities 4
-
High 8.1
Incorrect Authorization in CODESYS Control
The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.
-
High 7.8
Incorrect Default Permissions in CODESYS Development System
The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary file defining the components to be installed, enabling local privilege escalation …
-
High 7.8
Incorrect Default Permissions in CODESYS Development System
The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can exploit a TOCTOU race condition with a practical time window to replace verifi…
-
High 7.5
Out-of-bounds Write in CODESYS Control
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affect…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-31799, EUVD-2026-31800
-
#1
Initiale Fassung
References
-
VDE-CERT Security Advisory VDE-2026-055 vom 2026-05-25
https://certvde.com/de/advisories/VDE-2026-055/
-
VDE-CERT Security Advisory VDE-2026-056 vom 2026-05-25
https://certvde.com/de/advisories/VDE-2026-056/
-
VDE-CERT Security Advisory VDE-2026-057 vom 2026-05-25
https://certvde.com/de/advisories/VDE-2026-057/