VULNERABILITY INTELLIGENCE

CVE-2023-3670

CVSS score7.3 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2023-07-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

Weakness classification

  • CWE-668: Exposure of Resource to Wrong Sphere

Primary references