Description
A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CODESYS | CODESYS Control Win (SL) | < 3.5.20.10 | 3.5.20.10 |
| CODESYS | CODESYS Development System V3 | < 3.5.20.10 | 3.5.20.10 |
| CODESYS | CODESYS Edge Gateway for Windows | < 3.5.20.10 | 3.5.20.10 |
| CODESYS | CODESYS Gateway for Windows | < 3.5.20.10 | 3.5.20.10 |
| CODESYS | CODESYS HMI (SL) | < 3.5.20.10 | 3.5.20.10 |
Advisories 2
- VDE-2024-027 CODESYS: Vulnerability in multiple products through exposure of resource to wrong sphere CERT@VDE · May 14, 2025
- WID-SEC-2024-1285 CODESYS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 7, 2025