CODESYS: Vulnerability in CODESYS Development System allows execution of binaries
view advisory published 2023-08-03
The CODESYS Development System is vulnerable to the execution of malicious binaries from the current working directory.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-3662US | — | — | ||
In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users context… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- FixedCODESYS Development System
Update the CODESYS Development System to version 3.5.19.20. The CODESYS Development System can be downloaded and installed directly with the CODESYS Installer or be downloaded from the CODESYS Store. Alternatively, you will find further information on obtaining the software update in the CODESYS Update area
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan