codesys development system 3.5.17.0 vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of CODESYS GmbH CODESYS Development System 3.5.16. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to tr...

Codesys Development System 3.5.16.0 Codesys Development System 3.5.17.0

7.8

CVSSv3

A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger...

Codesys Development System 3.5.16.0 Codesys Development System 3.5.17.0

7.8

CVSSv3

A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a mali...

Codesys Development System 3.5.16.0 Codesys Development System 3.5.17.0

7.8

CVSSv3

A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicio...

Codesys Development System 3.5.16.0 Codesys Development System 3.5.17.0

7.8

CVSSv3

An unsafe deserialization vulnerability exists in the ObjectManager.plugin ObjectStream.ProfileByteArray functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicio...

Codesys Codesys 3.5.17.0 Codesys Codesys 3.5.16.0

7.8

CVSSv3

An unsafe deserialization vulnerability exists in the ObjectManager.plugin Project.get_MissingTypes() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious ...

Codesys Codesys 3.5.17.0 Codesys Codesys 3.5.16.0

7.8

CVSSv3

An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious fil...

Codesys Codesys 3.5.17.0 Codesys Codesys 3.5.16.0

7.3

CVSSv3

In CODESYS Development System versions from 3.5.17.0 and before 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users context .

Codesys Development System

7.3

CVSSv3

In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

Codesys Scripting Codesys Development System

7.8

CVSSv3

The Package Manager of CODESYS Development System 3 prior to 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook