title: A component of the CODESYS Control runtime system allows read and write access to configuration files
description: A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.
problem types: CWE-668 Exposure of Resource to Wrong Sphere
affected:
{
product: CODESYS Control RTE (SL)
vendor: CODESYS
versions:
lessThan: V3.5.17.40, status: affected, version: V3, versionType: custom
}
{
product: CODESYS Control RTE (for Beckhoff CX) SL
vendor: CODESYS
versions:
lessThan: V3.5.17.40, status: affected, version: V3, versionType: custom
}
{
product: CODESYS Control Win (SL)
vendor: CODESYS
versions:
lessThan: V3.5.17.40, status: affected, version: V3, versionType: custom
}
{
product: CODESYS HMI (SL)
vendor: CODESYS
versions:
lessThan: V3.5.17.40, status: affected, version: V3, versionType: custom
}
{
product: CODESYS Development System V3
vendor: CODESYS
versions:
lessThan: V3.5.17.40, status: affected, version: V3, versionType: custom
}
{
product: CODESYS Control Runtime System Toolkit
vendor: CODESYS
versions:
lessThan: V3.5.17.40, status: affected, version: V3, versionType: custom
}
{
product: CODESYS Embedded Target Visu Toolkit
vendor: CODESYS
versions:
lessThan: V3.5.17.40, status: affected, version: V3, versionType: custom
}
{
product: CODESYS Remote Target Visu Toolkit
vendor: CODESYS
versions:
lessThan: V3.5.17.40, status: affected, version: V3, versionType: custom
}
{
product: CODESYS Control for BeagleBone SL
vendor: CODESYS
versions:
lessThan: V4.5.0.0, status: affected, version: V4, versionType: custom
}
{
product: CODESYS Control for Beckhoff CX9020 SL
vendor: CODESYS
versions:
lessThan: V4.5.0.0, status: affected, version: V4, versionType: custom
}
{
product: CODESYS Control for emPC-A/iMX6 SL
vendor: CODESYS
versions:
lessThan: V4.5.0.0, status: affected, version: V4, versionType: custom
}
{
product: CODESYS Control for IOT2000 SL
vendor: CODESYS
versions:
lessThan: V4.5.0.0, status: affected, version: V4, versionType: custom
}
{
product: CODESYS Control for Linux SL
vendor: CODESYS
versions:
lessThan: V4.5.0.0, status: affected, version: V4, versionType: custom
}
{
product: CODESYS Control for PFC100 SL
vendor: CODESYS
versions:
lessThan: V4.5.0.0, status: affected, version: V4, versionType: custom
}
{
product: CODESYS Control for PFC200 SL
vendor: CODESYS
versions:
lessThan: V4.5.0.0, status: affected, version: V4, versionType: custom
}
{
product: CODESYS Control for PLCnext SL
vendor: CODESYS
versions:
lessThan: V4.5.0.0, status: affected, version: V4, versionType: custom
}
{
product: CODESYS Control for Raspberry Pi SL
vendor: CODESYS
versions:
lessThan: V4.5.0.0, status: affected, version: V4, versionType: custom
}
{
product: CODESYS Control for WAGO Touch Panels 600 SL
vendor: CODESYS
versions:
lessThan: V4.5.0.0, status: affected, version: V4, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
version: 3.1
]