CVE-2019-13532CWE-22

CVE-2019-13532: vulnerability in CODESYS V3 web server

Published · Updated

Follow this CVE+ Monitor web server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.5%
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.
Affected products
n/a · CODESYS V3 web server