7.8

CVE-2023-5751

CODESYS: Development system prone to DoS through exposure of resource to wrong sphere

A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere. 
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Herstellercodesys
≫
Produkt control_win_sl
Default Statusunknown
Version 0
Version < 3.5.20.10
Status affected
Herstellercodesys
≫
Produkt development_system_v3
Default Statusunknown
Version 0
Version < 3.5.20.10
Status affected
Herstellercodesys
≫
Produkt edge_gateway
Default Statusunknown
Version 0
Version < 3.5.20.10
Status affected
Herstellercodesys
≫
Produkt gateway
Default Statusunknown
Version 0
Version < 3.5.20.10
Status affected
Herstellercodesys
≫
Produkt hmi_sl
Default Statusunknown
Version 0
Version < 3.5.20.10
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.067
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
info@cert.vde.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-668 Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

https://cert.vde.com/en/advisories/VDE-2024-027
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18354&token=f3e92a942c3a2f90c272a5ded7598c6a0b5f4924&download=