#VU79505 Missing support for integrity check in CODESYS Development System - CVE-2023-3663 

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU79505

#VU79505 Missing support for integrity check in CODESYS Development System - CVE-2023-3663

Published: August 15, 2023


Vulnerability identifier: #VU79505
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2023-3663
CWE-ID: CWE-353
Exploitation vector: Adjecent network
Exploit availability: No public exploit available
Vulnerable software:
CODESYS Development System
Software vendor:
CODESYS

Description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to missing integrity check on notification data within the LearnMoreAction function. An attacker on the local network can send specially crafted requests to the application and execute arbitrary code on the system.


Remediation

Install updates from vendor's website.

External links