CVE-2019-13532
—CVSS 3.1
7.5 high
EPSS
3%p87
Published
()
Modified
Description
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.
- Vendors
- codesys
- Products
- control for beaglebone, control for empc-a\/imx6, control for iot2000, control for linux, control for pfc100, control for pfc200, control for raspberry pi, control rte, control runtime system toolkit, control win, embedded target visu toolkit, hmi
- Weakness
- CWE-22
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.