Description
In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CODESYS Control RTE (SL)
Default version status: unaffected
3.0.0.0 to < 3.5.19.0affected
CODESYS Control RTE (for Beckhoff CX) SL
Default version status: unaffected
3.0.0.0 to < 3.5.19.0affected
CODESYS Control Win (SL)
Default version status: unaffected
3.0.0.0 to < 3.5.19.0affected
CODESYS Runtime Toolkit
Default version status: unaffected
3.0.0.0 to < 3.5.19.0affected
CODESYS Safety SIL2 Runtime Toolkit
Default version status: unaffected
3.0.0.0 to < 3.5.19.0affected
CODESYS Safety SIL2 PSP
Default version status: unaffected
3.0.0.0 to < 3.5.19.0affected
CODESYS HMI (SL)
Default version status: unaffected
3.0.0.0 to < 3.5.19.0affected
CODESYS Development System V3
Default version status: unaffected
3.0.0.0 to < 3.5.19.0affected
CODESYS Control for BeagleBone SL
Default version status: unaffected
3.0.0.0 to < 4.8.0.0affected
CODESYS Control for emPC-A/iMX6 SL
Default version status: unaffected
3.0.0.0 to < 4.8.0.0affected
CODESYS Control for IOT2000 SL
Default version status: unaffected
3.0.0.0 to < 4.8.0.0affected
CODESYS Control for Linux SL
Default version status: unaffected
3.0.0.0 to < 4.8.0.0affected
CODESYS Control for PFC100 SL
Default version status: unaffected
3.0.0.0 to < 4.8.0.0affected
CODESYS Control for PFC200 SL
Default version status: unaffected
3.0.0.0 to < 4.8.0.0affected
CODESYS Control for PLCnext SL
Default version status: unaffected
3.0.0.0 to < 4.8.0.0affected
CODESYS Control for Raspberry Pi SL
Default version status: unaffected
3.0.0.0 to < 4.8.0.0affected
CODESYS Control for WAGO Touch Panels 600 SL
Default version status: unaffected
3.0.0.0 to < 4.8.0.0affected