PT-2024-8333 · 3S Smart Software Solutions · Codesys V3

Diego Giubertoni + 1 · Published 2024-11-18 · Updated 2024-11-18 · CVE-2024-41969

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CODESYS V3 (affected versions not specified)

Description A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability, which could lead to full system access and/or Denial of Service (DoS). The vulnerability is related to a critical function in the CODESYS V3 service that lacks proper authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2024-09889

CVE-2024-41969

Affected Products

Codesys V3

References · 9

• https://bdu.fstec.ru/vul/2024-09889 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41969 · Security Note
• https://t.me/cvedetector/11304 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1858519309074551057 · Twitter Post
• https://twitter.com/CVEnew/status/1858445681423172004 · Twitter Post
• https://t.me/cvenotify/101971 · Telegram Post
• https://cert.vde.com/en/advisories/VDE-2024-047 · Note
• https://certvde.com/en/advisories/VDE-2024-047 · Note
• https://twitter.com/CveFindCom/status/1858442914004644199 · Twitter Post