PT-2021-7835 · 3S Smart Software Solutions · Codesys Development System

Patrick Desantis · Published 2021-08-18 · Updated 2022-07-29 · CVE-2021-21868

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CODESYS Development System versions 3.5.16 through 3.5.17

Description An unsafe deserialization vulnerability exists in the ObjectManager.plugin Project.get MissingTypes() functionality. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.

Recommendations For versions 3.5.16 and 3.5.17, consider disabling the Project.get MissingTypes() function in the ObjectManager.plugin until a patch is available to prevent exploitation. Restrict access to the ObjectManager.plugin to minimize the risk of arbitrary command execution. Avoid using malicious files that can trigger this vulnerability until the issue is resolved.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2023-03529

CVE-2021-21868

Affected Products

Codesys Development System

References · 10

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1305 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-21868 · Security Note
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16805&token=ee583c498941d9fda86490bca98ff21928eec08a&download= · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21868 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03529 · Security Note
• https://vuldb.com/?id.181149 · Note
• https://t.me/cibsecurity/27533 · Telegram Post
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16805&token=ee583c498941d9fda86490bca98ff21928eec08a&download= · Note
• https://t.me/cvenotify/19624 · Telegram Post
• https://se.com/ae/en/download/document/SEVD-2022-011-06 · Note