CVE-2023-3670

HIGH

CODESYS Development System 3.5.9.0-3.5.17.0 and Scripting 4.0.0.0-4.1.0.0 - Unsafe Directory Permissions

Title source: llm
STIX 2.1

Description

In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

References (1)

Core 1
Core References

Scores

CVSS v3 7.3
EPSS 0.0020
EPSS Percentile 9.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-668
Status published
Products (2)
codesys/development_system 3.5.9.0 - 3.5.17.0
codesys/scripting 4.0.0.0 - 4.1.0.0
Published Jul 28, 2023
Tracked Since Feb 18, 2026