CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2019-13532
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.
Severity
- EPSS
- 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- codesys:control_for_beaglebone
- codesys:control_for_empc-a\/imx6
- codesys:control_for_iot2000
- codesys:control_for_linux
- codesys:control_for_pfc100
- codesys:control_for_pfc200
- codesys:control_for_raspberry_pi
- codesys:control_rte
- codesys:control_runtime_system_toolkit
- codesys:control_win
- codesys:embedded_target_visu_toolkit
- codesys:hmi
- codesys:remote_target_visu_toolkit