CVE-2023-3670
—CVSS 3.1
7.3 high
EPSS
<1%p10
Published
()
Modified
Description
In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.
- Vendors
- codesys
- Products
- development system, scripting
- Weakness
- CWE-668
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.