CVE-2023-3670
Published: Jul 28, 2023
Modified: Oct 21, 2024
CVSS v3.1
7.3
Description
In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.
| Vendor | Product | Versions |
|---|---|---|
CODESYS | CODESYS Development System | affected 3.5.9.0 - < 3.5.17.0 |
CODESYS | CODESYS Scripting | affected 4.0.0.0 - < 4.1.0.0 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now