Codesys: Vulnerability in CODESYS Development System and CODESYS Scripting

CVE-2023-3670

What is CVE-2023-3670?

The CODESYS Development System and CODESYS Scripting products are affected by a vulnerability that arises from improper directory permissions. This flaw permits an attacker with local access to the workstation to place malicious scripts within the system's directories. Once these scripts are present, they may be executed by unsuspecting legitimate users, potentially leading to unauthorized actions and compromise of system integrity.

References