CODESYS Development System
view advisory published 2023-08-24
Successful exploitation of this vulnerability could provide a local attacker with account information.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-3669US | —OT elevated | — | ||
A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import dialo… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-236-04 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-236-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationCODESYS Development System
For more information, please see the advisory CERT@VDE published for CODESYS at:(https://cert.vde.com/en-us/advisories/vde-2023-023)[https://cert.vde.com/en-us/advisories/vde-2023-023]
https://cert.vde.com/en-us/advisories/vde-2023-023)%5Bhttps://cert.vde.com/en-us/advisories/vde-2023-023%5D - FixedCODESYS Development System
CODESYS recommends users update the CODESYS Development System to version 3.5.19.20.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan