CVE-2023-3662
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users context.
Risk Assessment
This vulnerability may lead to unauthorized code execution, posing a risk to the integrity and security of the system.
Recommendation
It is recommended to update the CODESYS Development System to version 3.5.19.20 or later to mitigate this vulnerability.
Other vulnerabilities in CODESYS Development System
See all- CVE-2023-3669Low
A missing Brute-Force protection in CODESYS Development System prior to version 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import dialog.
- CVE-2023-3663High
In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server.
Original NVD description (English source)
In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users context .