CVE-2023-3670

7.3 highEPSS 0.2%

High (7.3) in codesys. EPSS 0.2% chance of exploitation in the next 30 days.

In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
CWE: CWE-668
Published: 2023-07-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

codesys:development_system
codesys:scripting

References

https://cert.vde.com/en/advisories/VDE-2023-024
https://cert.vde.com/en/advisories/VDE-2023-024

Check your stack JSON