CVE-2023-6357CWE-78

OS Command Injection in multiple CODESYS products

High · published December 5, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
61.1
In the wild
Unconfirmed
What it is

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00958 · 61.1th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2023-12-05T14:29Z
EPSS history
Timeline
  • 05 DEC 14:29Z
    OS Command Injection in multiple CODESYS products
    cvelistv5