← CVE Intelligence

CVE-2023-6357

OS Command Injection in multiple CODESYS products PUBLISHED

Description (CNA)

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

Affected (CNA)

Vendor / productVersions
CODESYS / CODESYS Control for BeagleBone SLaffected 0 before 4.11.0.0
CODESYS / CODESYS Control for emPC-A/iMX6 SLaffected 0 before 4.11.0.0
CODESYS / CODESYS Control for IOT2000 SLaffected 0 before 4.11.0.0
CODESYS / CODESYS Control for Linux ARM SLaffected 0 before 4.11.0.0
CODESYS / CODESYS Control for Linux SLaffected 0 before 4.11.0.0
CODESYS / CODESYS Control for PFC100 SLaffected 0 before 4.11.0.0
CODESYS / CODESYS Control for PFC200 SLaffected 0 before 4.11.0.0
CODESYS / CODESYS Control for PLCnext SLaffected 0 before 4.11.0.0
CODESYS / CODESYS Control for Raspberry Pi SLaffected 0 before 4.11.0.0
CODESYS / CODESYS Control for WAGO Touch Panels 600 SLaffected 0 before 4.11.0.0
CODESYS / CODESYS Runtime Toolkit for Linux or QNXaffected 0 before 3.5.19.50

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.