CODESYS Development System
Advisory ansehen veröffentlicht 2023-08-24
Successful exploitation of this vulnerability could provide a local attacker with account information.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-3669US | —OT erhöht | — | ||
A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import dialo… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-236-04 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-236-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationCODESYS Development System
For more information, please see the advisory CERT@VDE published for CODESYS at:(https://cert.vde.com/en-us/advisories/vde-2023-023)[https://cert.vde.com/en-us/advisories/vde-2023-023]
https://cert.vde.com/en-us/advisories/vde-2023-023)%5Bhttps://cert.vde.com/en-us/advisories/vde-2023-023%5D - BehobenCODESYS Development System
CODESYS recommends users update the CODESYS Development System to version 3.5.19.20.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan