Description
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to be extracted or to accept certificates as trusted. Although all services remain available, only unencrypted communication is possible if the certificates are deleted.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CODESYS Control RTE (SL)
Default version status: unaffected
0.0.0.0 to < 3.5.21.20affected
CODESYS Control RTE (for Beckhoff CX) SL
Default version status: unaffected
0.0.0.0 to < 3.5.21.20affected
CODESYS Control Win (SL)
Default version status: unaffected
0.0.0.0 to < 3.5.21.20affected
CODESYS HMI (SL)
Default version status: unaffected
0.0.0.0 to < 3.5.21.20affected
CODESYS Runtime Toolkit
Default version status: unaffected
0.0.0.0 to < 3.5.21.20affected
CODESYS Control for BeagleBone SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected
CODESYS Control for emPC-A/iMX6 SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected
CODESYS Control for IOT2000 SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected
CODESYS Control for Linux ARM SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected
CODESYS Control for Linux SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected
CODESYS Control for PFC100 SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected
CODESYS Control for PFC200 SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected
CODESYS Control for PLCnext SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected
CODESYS Control for Raspberry Pi SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected
CODESYS Control for WAGO Touch Panels 600 SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected
CODESYS Virtual Control SL
Default version status: unaffected
0.0.0.0 to < 4.17.0.0affected