CVE-2023-3670CWE-668

Codesys: Vulnerability in CODESYS Development System and CODESYS Scripting

High · published July 28, 2023

CVSS v3.1
7.3
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2023-07-28T07:52Z
EPSS history
Timeline
  • 28 JUL 07:52Z
    Codesys: Vulnerability in CODESYS Development System and CODESYS Scripting
    cvelistv5