CODESYS Control V2 Linux SysFile library
view advisory published 2021-06-22
Successful exploitation of this vulnerability may allow the control programmer to call additional OS functions from the PLC logic utilizing the SysFile system library.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-30187US | medium5.3 | — | ||
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- MitigationCODESYS reports all runtime systems for Linux based on a CODESYS V2 Runtime Toolkit 32-bit full
Activate and apply user management and password features.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan