CODESYS Scripting vulnerabilities

Latest CODESYS Scripting CVEs

Newest publication first

1. CVE-2023-3670 Codesys: Vulnerability in CODESYS Development System and CODESYS Scripting

   Published 2023-07-28

   High·CVSS 7.3

   In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.