Vulnerability-Lookup

CVE-2023-6357 (GCVE-0-2023-6357)

Vulnerability from cvelistv5 – Published: 2023-12-05 14:29 – Updated: 2024-08-02 08:28

Title

OS Command Injection in multiple CODESYS products

Summary

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE icscert root

References

1 reference

URL	Tags
https://https://cert.vde.com/en/advisories/VDE-2023-066

Impacted products

11 products

Vendor	Product	Version	CPE status
CODESYS	CODESYS Control for BeagleBone SL	Affected: 0 , < 4.11.0.0 (semver)	guessed
CODESYS	CODESYS Control for emPC-A/iMX6 SL	Affected: 0 , < 4.11.0.0 (semver)	guessed
CODESYS	CODESYS Control for IOT2000 SL	Affected: 0 , < 4.11.0.0 (semver)	guessed
CODESYS	CODESYS Control for Linux ARM SL	Affected: 0 , < 4.11.0.0 (semver)	guessed
CODESYS	CODESYS Control for Linux SL	Affected: 0 , < 4.11.0.0 (semver)	guessed
CODESYS	CODESYS Control for PFC100 SL	Affected: 0 , < 4.11.0.0 (semver)	guessed
CODESYS	CODESYS Control for PFC200 SL	Affected: 0 , < 4.11.0.0 (semver)	guessed
CODESYS	CODESYS Control for PLCnext SL	Affected: 0 , < 4.11.0.0 (semver)	guessed
CODESYS	CODESYS Control for Raspberry Pi SL	Affected: 0 , < 4.11.0.0 (semver)	guessed
CODESYS	CODESYS Control for WAGO Touch Panels 600 SL	Affected: 0 , < 4.11.0.0 (semver)	guessed
CODESYS	CODESYS Runtime Toolkit for Linux or QNX	Affected: 0 , < 3.5.19.50 (semver)	guessed

Date Public

2023-12-05 14:25

Credits

Chuya Hayakawa of 00One, Inc.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:28:21.783Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://https://cert.vde.com/en/advisories/VDE-2023-066"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux ARM SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Runtime Toolkit for Linux or QNX",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.19.50",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Chuya Hayakawa of 00One, Inc."
        }
      ],
      "datePublic": "2023-12-05T14:25:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device."
            }
          ],
          "value": "A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-05T14:29:25.649Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://https://cert.vde.com/en/advisories/VDE-2023-066"
        }
      ],
      "source": {
        "advisory": "VDE-2023-066",
        "defect": [
          "CERT@VDE#64623"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "OS Command Injection in multiple CODESYS products",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2023-6357",
    "datePublished": "2023-12-05T14:29:25.649Z",
    "dateReserved": "2023-11-28T07:20:59.774Z",
    "dateUpdated": "2024-08-02T08:28:21.783Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-6357",
      "date": "2026-09-15",
      "epss": "0.00958",
      "percentile": "0.59607"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.11.0.0\", \"matchCriteriaId\": \"DEFEF3B4-03F2-4E09-A8F2-02A0604CB8BF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:control_for_empc-a\\\\/imx6:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.11.0.0\", \"matchCriteriaId\": \"B2DB55B1-CAFE-435B-8776-DB4D33ED9C98\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.11.0.0\", \"matchCriteriaId\": \"7D492DB3-94BA-4F14-8119-1610AB4F95EE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.11.0.0\", \"matchCriteriaId\": \"97D00DF9-EBF1-4DEC-8A49-694871643B9F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.11.0.0\", \"matchCriteriaId\": \"D6F207B6-5906-4B39-A5B4-A07F6D5A9BB9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.11.0.0\", \"matchCriteriaId\": \"7791D9E4-CEC3-4658-8E2C-8F08882CE4F4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.11.0.0\", \"matchCriteriaId\": \"9CADE021-8D58-4BC5-BA60-A16FE24FBA73\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.11.0.0\", \"matchCriteriaId\": \"B3948946-E7B8-4D7E-8D1D-80B9E0DB47AF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.11.0.0\", \"matchCriteriaId\": \"7C9DF443-E965-4480-B76E-4A25CF2E714F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.11.0.0\", \"matchCriteriaId\": \"F5FCD76E-A3F5-4E02-AD3F-B2BDE708A651\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.5.19.50\", \"matchCriteriaId\": \"162DB2B8-3426-43F7-848A-BE542C24619C\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.\"}, {\"lang\": \"es\", \"value\": \"Un atacante remoto con pocos privilegios podr\\u00eda aprovechar la vulnerabilidad e inyectar comandos adicionales del sistema a trav\\u00e9s de librer\\u00edas del sistema de archivos que podr\\u00edan darle al atacante el control total del dispositivo.\"}]",
      "id": "CVE-2023-6357",
      "lastModified": "2024-11-21T08:43:41.900",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"info@cert.vde.com\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}]}",
      "published": "2023-12-05T15:15:08.983",
      "references": "[{\"url\": \"https://https://cert.vde.com/en/advisories/VDE-2023-066\", \"source\": \"info@cert.vde.com\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://cert.vde.com/en/advisories/VDE-2023-066\", \"source\": \"nvd@nist.gov\", \"tags\": [\"Mitigation\", \"Third Party Advisory\"]}, {\"url\": \"https://https://cert.vde.com/en/advisories/VDE-2023-066\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\"]}]",
      "sourceIdentifier": "info@cert.vde.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"info@cert.vde.com\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-78\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-6357\",\"sourceIdentifier\":\"info@cert.vde.com\",\"published\":\"2023-12-05T15:15:08.983\",\"lastModified\":\"2026-06-17T06:50:36.300\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.\"},{\"lang\":\"es\",\"value\":\"Un atacante remoto con pocos privilegios podr\u00eda aprovechar la vulnerabilidad e inyectar comandos adicionales del sistema a trav\u00e9s de librer\u00edas del sistema de archivos que podr\u00edan darle al atacante el control total del dispositivo.\"}],\"affected\":[{\"source\":\"info@cert.vde.com\",\"affectedData\":[{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for BeagleBone SL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.11.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for emPC-A/iMX6 SL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.11.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for IOT2000 SL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.11.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for Linux ARM SL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.11.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for Linux SL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.11.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for PFC100 SL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.11.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for PFC200 SL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.11.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for PLCnext SL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.11.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for Raspberry Pi SL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.11.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for WAGO Touch Panels 600 SL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.11.0.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Runtime Toolkit for Linux or QNX\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"3.5.19.50\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"info@cert.vde.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"info@cert.vde.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.11.0.0\",\"matchCriteriaId\":\"DEFEF3B4-03F2-4E09-A8F2-02A0604CB8BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_empc-a\\\\/imx6:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.11.0.0\",\"matchCriteriaId\":\"B2DB55B1-CAFE-435B-8776-DB4D33ED9C98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.11.0.0\",\"matchCriteriaId\":\"7D492DB3-94BA-4F14-8119-1610AB4F95EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.11.0.0\",\"matchCriteriaId\":\"97D00DF9-EBF1-4DEC-8A49-694871643B9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.11.0.0\",\"matchCriteriaId\":\"D6F207B6-5906-4B39-A5B4-A07F6D5A9BB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.11.0.0\",\"matchCriteriaId\":\"7791D9E4-CEC3-4658-8E2C-8F08882CE4F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.11.0.0\",\"matchCriteriaId\":\"9CADE021-8D58-4BC5-BA60-A16FE24FBA73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.11.0.0\",\"matchCriteriaId\":\"B3948946-E7B8-4D7E-8D1D-80B9E0DB47AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.11.0.0\",\"matchCriteriaId\":\"7C9DF443-E965-4480-B76E-4A25CF2E714F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.11.0.0\",\"matchCriteriaId\":\"F5FCD76E-A3F5-4E02-AD3F-B2BDE708A651\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5.19.50\",\"matchCriteriaId\":\"162DB2B8-3426-43F7-848A-BE542C24619C\"}]}]}],\"references\":[{\"url\":\"https://https://cert.vde.com/en/advisories/VDE-2023-066\",\"source\":\"info@cert.vde.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://cert.vde.com/en/advisories/VDE-2023-066\",\"source\":\"nvd@nist.gov\",\"tags\":[\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"https://https://cert.vde.com/en/advisories/VDE-2023-066\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2025-05-28T23:46:14+00:00",
      "cve": "CVE-2023-6357",
      "id": "CVE-2023-6357",
      "initial_release_date": "2023-12-05T14:25:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "OS Command Injection in multiple CODESYS products",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-6357.json",
      "version": "3"
    }
  }
}

3ADR011377

Vulnerability from csaf_abb - Published: 2025-01-07 00:30 - Updated: 2025-01-07 00:30

Summary

AC500 V3 Multiple vulnerabilities

Scope

5 vulnerabilities in this advisory, including CVE-2023-6357.

CVE-2023-6357

A successfully authenticated control programmer could exploit this vulnerability to inject calls to additional operating system shell functions via the SysFile or CAA file system libraries.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 1 product Known affected: 1 product

Open the full advisory

FKIE_CVE-2023-6357

Vulnerability from fkie_nvd - Published: 2023-12-05 15:15 - Updated: 2026-06-17 06:50

Severity

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

References

URL	Tags
info@cert.vde.com	https://https://cert.vde.com/en/advisories/VDE-2023-066	Broken Link
nvd@nist.gov	https://cert.vde.com/en/advisories/VDE-2023-066	Mitigation, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://https://cert.vde.com/en/advisories/VDE-2023-066	Broken Link

Impacted products

Vendor	Product	Version
codesys	control_for_beaglebone_sl	*
codesys	control_for_empc-a\/imx6	*
codesys	control_for_iot2000_sl	*
codesys	control_for_linux_arm_sl	*
codesys	control_for_linux_sl	*
codesys	control_for_pfc100_sl	*
codesys	control_for_pfc200_sl	*
codesys	control_for_plcnext_sl	*
codesys	control_for_raspberry_pi_sl	*
codesys	control_for_wago_touch_panels_600_sl	*
codesys	runtime_toolkit	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux ARM SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.11.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Runtime Toolkit for Linux or QNX",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.19.50",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "info@cert.vde.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEFEF3B4-03F2-4E09-A8F2-02A0604CB8BF",
              "versionEndExcluding": "4.11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2DB55B1-CAFE-435B-8776-DB4D33ED9C98",
              "versionEndExcluding": "4.11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D492DB3-94BA-4F14-8119-1610AB4F95EE",
              "versionEndExcluding": "4.11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "97D00DF9-EBF1-4DEC-8A49-694871643B9F",
              "versionEndExcluding": "4.11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6F207B6-5906-4B39-A5B4-A07F6D5A9BB9",
              "versionEndExcluding": "4.11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7791D9E4-CEC3-4658-8E2C-8F08882CE4F4",
              "versionEndExcluding": "4.11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9CADE021-8D58-4BC5-BA60-A16FE24FBA73",
              "versionEndExcluding": "4.11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3948946-E7B8-4D7E-8D1D-80B9E0DB47AF",
              "versionEndExcluding": "4.11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C9DF443-E965-4480-B76E-4A25CF2E714F",
              "versionEndExcluding": "4.11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5FCD76E-A3F5-4E02-AD3F-B2BDE708A651",
              "versionEndExcluding": "4.11.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "162DB2B8-3426-43F7-848A-BE542C24619C",
              "versionEndExcluding": "3.5.19.50",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto con pocos privilegios podr\u00eda aprovechar la vulnerabilidad e inyectar comandos adicionales del sistema a trav\u00e9s de librer\u00edas del sistema de archivos que podr\u00edan darle al atacante el control total del dispositivo."
    }
  ],
  "id": "CVE-2023-6357",
  "lastModified": "2026-06-17T06:50:36.300",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2023-12-05T15:15:08.983",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Broken Link"
      ],
      "url": "https://https://cert.vde.com/en/advisories/VDE-2023-066"
    },
    {
      "source": "nvd@nist.gov",
      "tags": [
        "Mitigation",
        "Third Party Advisory"
      ],
      "url": "https://cert.vde.com/en/advisories/VDE-2023-066"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "https://https://cert.vde.com/en/advisories/VDE-2023-066"
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Secondary"
    }
  ]
}

FSA-202601

Vulnerability from csaf_festosecokg - Published: 2026-02-26 08:00 - Updated: 2026-02-26 08:00

Summary

Several CODESYS vulnerabilities in Festo Automation Suite

Severity

Critical

Scope

126 vulnerabilities in this advisory, including CVE-2023-6357.

CVE-2023-6357

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 1 product Known affected: 4 products

Open the full advisory

GHSA-2FX7-MF6R-PFF9

Vulnerability from github – Published: 2023-12-05 15:30 – Updated: 2023-12-05 15:30

Details

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

Severity

8.8 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-6357"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-78"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-12-05T15:15:08Z",
    "severity": "HIGH"
  },
  "details": "A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.",
  "id": "GHSA-2fx7-mf6r-pff9",
  "modified": "2023-12-05T15:30:38Z",
  "published": "2023-12-05T15:30:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6357"
    },
    {
      "type": "WEB",
      "url": "https://cert.vde.com/en/advisories/VDE-2023-066"
    },
    {
      "type": "WEB",
      "url": "https://https://cert.vde.com/en/advisories/VDE-2023-066"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2023-6357

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

Aliases

CVE-2023-6357

Aliases

CVE-2023-6357

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2023-6357",
    "id": "GSD-2023-6357"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-6357"
      ],
      "details": "A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.",
      "id": "GSD-2023-6357",
      "modified": "2023-12-13T01:20:33.014204Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "info@cert.vde.com",
        "ID": "CVE-2023-6357",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "CODESYS Control for BeagleBone SL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "4.11.0.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "CODESYS Control for emPC-A/iMX6 SL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "4.11.0.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "CODESYS Control for IOT2000 SL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "4.11.0.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "CODESYS Control for Linux ARM SL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "4.11.0.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "CODESYS Control for Linux SL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "4.11.0.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "CODESYS Control for PFC100 SL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "4.11.0.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "CODESYS Control for PFC200 SL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "4.11.0.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "CODESYS Control for PLCnext SL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "4.11.0.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "CODESYS Control for Raspberry Pi SL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "4.11.0.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "CODESYS Control for WAGO Touch Panels 600 SL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "4.11.0.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "CODESYS Runtime Toolkit for Linux or QNX",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "0",
                          "version_value": "3.5.19.50"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "CODESYS"
            }
          ]
        }
      },
      "credits": [
        {
          "lang": "en",
          "value": "Chuya Hayakawa of 00One, Inc."
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device."
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.1.0-dev"
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-78",
                "lang": "eng",
                "value": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://https://cert.vde.com/en/advisories/VDE-2023-066",
            "refsource": "MISC",
            "url": "https://https://cert.vde.com/en/advisories/VDE-2023-066"
          }
        ]
      },
      "source": {
        "advisory": "VDE-2023-066",
        "defect": [
          "CERT@VDE#64623"
        ],
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "3.5.19.50",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "ID": "CVE-2023-6357"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-78"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://https://cert.vde.com/en/advisories/VDE-2023-066",
              "refsource": "",
              "tags": [
                "Broken Link"
              ],
              "url": "https://https://cert.vde.com/en/advisories/VDE-2023-066"
            },
            {
              "name": "https://cert.vde.com/en/advisories/VDE-2023-066",
              "refsource": "MISC",
              "tags": [
                "Mitigation",
                "Third Party Advisory"
              ],
              "url": "https://cert.vde.com/en/advisories/VDE-2023-066"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2023-12-11T20:49Z",
      "publishedDate": "2023-12-05T15:15Z"
    }
  }
}

ICSA-26-076-01

Vulnerability from csaf_cisa - Published: 2026-02-26 08:00 - Updated: 2026-03-17 06:00

Summary

CODESYS in Festo Automation Suite

Severity

Critical

Scope

126 vulnerabilities in this advisory, including CVE-2023-6357.

CVE-2023-6357

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 1 product Known affected: 4 products

Open the full advisory

VDE-2023-066

Vulnerability from csaf_codesysgmbh - Published: 2023-12-05 14:25 - Updated: 2023-12-05 14:25

Summary

CODESYS: OS Command Injection Vulnerability in multiple CODESYS Control products

Scope

1 vulnerability in this advisory, including CVE-2023-6357.

CVE-2023-6357

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 11 products Known affected: 11 products

Open the full advisory

VDE-2025-008

Vulnerability from csaf_wagogmbhcokg - Published: 2025-02-04 11:00 - Updated: 2025-05-14 13:00

Summary

WAGO: Vulnerabilities in CODESYS Control

Scope

1 vulnerability in this advisory, including CVE-2023-6357.

CVE-2023-6357

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 24 products Known affected: 24 products

Open the full advisory

WID-SEC-W-2024-0943

Vulnerability from csaf_certbund - Published: 2024-04-21 22:00 - Updated: 2025-01-07 23:00

Summary

CODESYS: Mehrere Schwachstellen

Severity

Hoch

Scope

25 vulnerabilities in this advisory, including CVE-2023-6357.

CVE-2023-6357

Es bestehen mehrere Schwachstellen in CODESYS. Diese Fehler bestehen in mehreren Komponenten und Subsystemen wie dem Control, Development System oder dem SysDrv3S.sys-Treiber, unter anderem aufgrund mehrerer sicherheitsrelevanter Probleme wie einer OS-Befehlsinjektion, einem Out-of-bounds-Write oder einer unzulässigen Einschränkung von Authentifizierungsversuchen. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand auszulösen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder Brute-Force-Angriffe durchzuführen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion oder eine Anmeldung, um erfolgreich ausgenutzt zu werden.

Known affected: 2 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2023-6357 (GCVE-0-2023-6357)

Tags

Sightings

Nomenclature

Related by attack behaviour