CVE-2023-3670 — Codesys: Vulnerability in CODESYS Development System and CODESYS Scripting

CVE-2023-3670

Codesys: Vulnerability in CODESYS Development System and CODESYS Scripting PUBLISHED

Description (CNA)

In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

Affected (CNA)

Vendor / product	Versions
CODESYS / CODESYS Development System	affected 3.5.9.0 before 3.5.17.0
CODESYS / CODESYS Scripting	affected 4.0.0.0 before 4.1.0.0

CWE

CWE-668

References

https://cert.vde.com/en/advisories/VDE-2023-024

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2023-024

CISA-ADP

No English description supplied.

No references supplied.