CVE-2022-1965CWE-755

CODESYS runtime system prone to file deletion due to improper error handling

High · published June 24, 2022

CVSS v3.1
8.1
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01053 · 64.1th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2022-06-24T07:46Z
EPSS history
Timeline
  • 24 JUN 07:46Z
    CODESYS runtime system prone to file deletion due to improper error handling
    cvelistv5