Overview
- Description
- In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.
- Source
- info@cert.vde.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.3
- Impact score
- 5.9
- Exploitability score
- 1.3
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
Weaknesses
- info@cert.vde.com
- CWE-668
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "727C53CA-E8D1-4280-8CFA-64A6ECFDA41B",
"versionEndExcluding": "3.5.17.0",
"versionStartIncluding": "3.5.9.0"
},
{
"criteria": "cpe:2.3:a:codesys:scripting:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBD63247-C6C1-44FC-99C7-71FC875125A6",
"versionEndExcluding": "4.1.0.0",
"versionStartIncluding": "4.0.0.0"
}
],
"operator": "OR"
}
]
}
]