CVE-2023-5751: falha de alta gravidade em CODESYS Control Win (SL)
CODESYS: Development system prone to DoS through exposure of resource to wrong sphere
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.2%
A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
CODESYS · CODESYS Control Win (SL)CODESYS · CODESYS Development System V3CODESYS · CODESYS Edge Gateway for WindowsCODESYS · CODESYS Gateway for WindowsCODESYS · CODESYS HMI (SL)CVEs relacionadas — CODESYS Control Win (SL)
No mesmo produto, das mais perigosas para as menos.
CVE-2022-47379HIGHCODESYS: Multiple products prone to out-of-bounds writeEPSS 2.0%CVE-2022-47391HIGHCODESYS: Multiple products prone to Improper Input ValidationEPSS 1.9%CVE-2022-22519HIGHSpecial HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.EPSS 1.7%CVE-2022-22517HIGHCommunication Components in multiple CODESYS products vulnerable to communication channel disruptionEPSS 1.5%CVE-2022-47386HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%CVE-2022-47385HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%