CVE-2023-3662highCWE-427

CVE-2023-3662: fallo de gravedad alta en CODESYS Development System

CODESYS: Vulnerability in CODESYS Development System allows for execution of binaries

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear CODESYS Development System

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.3epss 0.2%
In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users context .
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Productos afectados
CODESYS · CODESYS Development System
CVEs relacionadas — CODESYS Development System

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-31805HIGHInsecure transmission of credentialsEPSS 1.0%CVE-2023-3663HIGHCODESYS: Missing integrity check in CODESYS Development SystemEPSS 1.0%CVE-2023-3670HIGHCodesys: Vulnerability in CODESYS Development System and CODESYS ScriptingEPSS 0.2%CVE-2025-41700HIGHCODESYS Development System - Deserialization of Untrusted DataEPSS 0.2%CVE-2023-3669LOWCODESYS: Missing Brute-Force protection in CODESYS Development SystemEPSS 0.1%CVE-2026-44468HIGHIncorrect Default Permissions in CODESYS Development SystemEPSS 0.1%