Description (CNA)
CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CODESYS / Runtime Toolkit | affected 0.0.0.0 before 3.5.21.20 |
| CODESYS / Control for BeagleBone SL | affected 0.0.0.0 before 4.16.0.0 |
| CODESYS / Control for emPC-A/iMX6 SL | affected 0.0.0.0 before 4.16.0.0 |
| CODESYS / Control for IOT2000 SL | affected 0.0.0.0 before 4.16.0.0 |
| CODESYS / Control for Linux ARM SL | affected 0.0.0.0 before 4.16.0.0 |
| CODESYS / Control for Linux SL | affected 0.0.0.0 before 4.16.0.0 |
| CODESYS / Control for PFC100 SL | affected 0.0.0.0 before 4.16.0.0 |
| CODESYS / Control for PFC200 SL | affected 0.0.0.0 before 4.16.0.0 |
| CODESYS / Control for PLCnext SL | affected 0.0.0.0 before 4.16.0.0 |
| CODESYS / Control for Raspberry Pi SL | affected 0.0.0.0 before 4.16.0.0 |
| CODESYS / Control for WAGO Touch Panels 600 SL | affected 0.0.0.0 before 4.16.0.0 |
| CODESYS / Virtual Control SL | affected 0.0.0.0 before 4.16.0.0 |
CWE
CWE-276
References
ADP enrichment
No English description supplied.
No references supplied.