Description (CNA)
A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CODESYS / CODESYS Control Win (SL) | affected 0 before 3.5.20.10 |
| CODESYS / CODESYS Development System V3 | affected 0 before 3.5.20.10 |
| CODESYS / CODESYS Edge Gateway for Windows | affected 0 before 3.5.20.10 |
| CODESYS / CODESYS Gateway for Windows | affected 0 before 3.5.20.10 |
| CODESYS / CODESYS HMI (SL) | affected 0 before 3.5.20.10 |
CWE
CWE-668
References
- https://cert.vde.com/en/advisories/VDE-2024-027
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18354&token=f3e92a942c3a2f90c272a5ded7598c6a0b5f4924&download=
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.