PT-2023-32625 · Codesys · Codesys Control For Beaglebone+19

Chuya Hayakawa · Published 2023-12-05 · Updated 2023-12-11 · CVE-2023-6357

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A low-privileged remote attacker could exploit the issue and inject additional system commands via file system libraries, potentially giving the attacker full control of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-6357

Affected Products

Codesys Control For Beaglebone

Codesys Control For Iot2000

Codesys Control For Linux Arm Sl

Codesys Control For Linux

Codesys Control For Pfc100

Codesys Control For Pfc200

Codesys Control For Plcnext

Codesys Control For Raspberry Pi

Codesys Control For Wago Touch Panels 600 Sl

Codesys Control For Empc-A/Imx6

Codesys Runtime Toolkit For Linux/Qnx

Control For Beaglebone Sl

Control For Empc-A/Imx6

Control For Iot2000 Sl

Control For Linux Arm Sl

Control For Pfc100 Sl

Control For Pfc200 Sl

Control For Plcnext Sl

Control For Raspberry Pi Sl

Runtime Toolkit

References · 6

• https://osv.dev/vulnerability/CVE-2023-6357 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6357 · Security Note
• https://cert.vde.com/en/advisories/VDE-2023-066 · Note
• https://twitter.com/CVEnew/status/1732047787880235071 · Twitter Post
• https://t.me/cvenotify/63238 · Telegram Post
• https://https//cert.vde.com/en/advisories/VDE-2023-066 · Note