Количество 3
Количество 3
CVE-2021-21868
An unsafe deserialization vulnerability exists in the ObjectManager.plugin Project.get_MissingTypes() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
GHSA-j437-r3p6-wvg8
A unsafe deserialization vulnerability exists in the ObjectManager.plugin Project.get_MissingTypes() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
BDU:2023-03529
Уязвимость функции Project.get_MissingTypes() плагина ObjectManager.plugin комплекса прикладного программирования ПЛК CODESYS Development System, позволяющая нарушителю выполнить произвольную команду
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2021-21868 An unsafe deserialization vulnerability exists in the ObjectManager.plugin Project.get_MissingTypes() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | CVSS3: 7.8 | 0% Низкий | больше 4 лет назад | |
GHSA-j437-r3p6-wvg8 A unsafe deserialization vulnerability exists in the ObjectManager.plugin Project.get_MissingTypes() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. | CVSS3: 7.8 | 0% Низкий | больше 3 лет назад | |
BDU:2023-03529 Уязвимость функции Project.get_MissingTypes() плагина ObjectManager.plugin комплекса прикладного программирования ПЛК CODESYS Development System, позволяющая нарушителю выполнить произвольную команду | CVSS3: 8.8 | 0% Низкий | около 4 лет назад |
Уязвимостей на страницу