An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Control_for_beaglebone | Codesys | * | 3.5.16.0 (excluding) |
| Control_for_empc-a/imx6 | Codesys | * | 3.5.16.0 (excluding) |
| Control_for_iot2000 | Codesys | * | 3.5.16.0 (excluding) |
| Control_for_pfc100 | Codesys | * | 3.5.16.0 (excluding) |
| Control_for_pfc200 | Codesys | * | 3.5.16.0 (excluding) |
| Control_for_plcnext | Codesys | * | 3.5.16.0 (excluding) |
| Control_for_raspberry_pi | Codesys | * | 3.5.16.0 (excluding) |
| Control_rte | Codesys | 3.0 (including) | 3.5.16.0 (excluding) |
| Control_runtime_system_toolkit | Codesys | 3.0 (including) | 3.5.16.0 (excluding) |
| Control_win | Codesys | 3.0 (including) | 3.5.16.0 (excluding) |
| Development_system | Codesys | * | 3.5.16.0 (excluding) |
| Hmi | Codesys | 3.0 (including) | 3.5.16.0 (excluding) |
References
- https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=13136\u0026token=c267875c01ea70bc9613bc39c684eedc17f55420\u0026download=
- https://www.codesys.com
- https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=13136\u0026token=c267875c01ea70bc9613bc39c684eedc17f55420\u0026download=
- https://www.codesys.com