Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-5751

CODESYS: Development system prone to DoS through exposure of resource to wrong sphere

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere. 

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS CODESYS Control Win (SL)

Default version status: unaffected

  • 0 to < 3.5.20.10affected

CODESYS CODESYS Development System V3

Default version status: unaffected

  • 0 to < 3.5.20.10affected

CODESYS CODESYS Edge Gateway for Windows

Default version status: unaffected

  • 0 to < 3.5.20.10affected

CODESYS CODESYS Gateway for Windows

Default version status: unaffected

  • 0 to < 3.5.20.10affected

CODESYS CODESYS HMI (SL)

Default version status: unaffected

  • 0 to < 3.5.20.10affected

References