Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cx2q-9f4q-7mgw

Опубликовано: 01 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.

An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.

EPSS

Процентиль: 9%
0.00033
Низкий

7.8 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 7.8
nvd
2 месяца назад

An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.

CVSS3: 7.8
fstec
2 месяца назад

Уязвимость комплекса прикладного программирования ПЛК CODESYS Development System, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 9%
0.00033
Низкий

7.8 High

CVSS3

Дефекты

CWE-502