Read the docs
TI-2023-05290 Aliases CVE-2023-5751GHSA-3r4g-2cq7-57r5

CODESYS: Development system prone to DoS through exposure of resource to wrong sphere

Priority LOW 35CWE-668Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00172 6th percentileScored 2026-11-07
Fix Fixed CODESYS Control Win (SL) (CODESYS): 3.5.20.10CODESYS Development System V3 (CODESYS): 3.5.20.10+3 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CODESYSCODESYS Control Win (SL)before 3.5.20.103.5.20.10Patch availableCNA
CODESYSCODESYS Development System V3before 3.5.20.103.5.20.10Patch availableCNA
CODESYSCODESYS Edge Gateway for Windowsbefore 3.5.20.103.5.20.10Patch availableCNA
CODESYSCODESYS Gateway for Windowsbefore 3.5.20.103.5.20.10Patch availableCNA
CODESYSCODESYS HMI (SL)before 3.5.20.103.5.20.10Patch availableCNA
  • CODESYS Control Win (SL) VendorCODESYS Affected before 3.5.20.10 Fixed in 3.5.20.10 Patch available CNA
  • CODESYS Development System V3 VendorCODESYS Affected before 3.5.20.10 Fixed in 3.5.20.10 Patch available CNA
  • CODESYS Edge Gateway for Windows VendorCODESYS Affected before 3.5.20.10 Fixed in 3.5.20.10 Patch available CNA
  • CODESYS Gateway for Windows VendorCODESYS Affected before 3.5.20.10 Fixed in 3.5.20.10 Patch available CNA
  • CODESYS HMI (SL) VendorCODESYS Affected before 3.5.20.10 Fixed in 3.5.20.10 Patch available CNA

CPE names CISA-ADP · 5

CPEVersionsRoleVendor
cpe:2.3:a:codesys:control_win_sl:0:*:*:*:*:*:*:*0—CODESYS
cpe:2.3:a:codesys:development_system_v3:0:*:*:*:*:*:*:*0—CODESYS
cpe:2.3:a:codesys:edge_gateway:0:*:*:*:*:*:*:*0—CODESYS
cpe:2.3:a:codesys:gateway:0:*:*:*:*:*:*:*0—CODESYS
cpe:2.3:a:codesys:hmi_sl:0:*:*:*:*:*:*:*0—CODESYS
  • cpe:2.3:a:codesys:control_win_sl:0:*:*:*:*:*:*:* Versions 0 — ·CODESYS
  • cpe:2.3:a:codesys:development_system_v3:0:*:*:*:*:*:*:* Versions 0 — ·CODESYS
  • cpe:2.3:a:codesys:edge_gateway:0:*:*:*:*:*:*:* Versions 0 — ·CODESYS
  • cpe:2.3:a:codesys:gateway:0:*:*:*:*:*:*:* Versions 0 — ·CODESYS
  • cpe:2.3:a:codesys:hmi_sl:0:*:*:*:*:*:*:* Versions 0 — ·CODESYS

Remediation

  • Fix · CNA CODESYS Control Win (SL) (CODESYS) Fixed in 3.5.20.10
  • Fix · CNA CODESYS Development System V3 (CODESYS) Fixed in 3.5.20.10
  • Fix · CNA CODESYS Edge Gateway for Windows (CODESYS) Fixed in 3.5.20.10
  • Fix · CNA CODESYS Gateway for Windows (CODESYS) Fixed in 3.5.20.10
  • Fix · CNA CODESYS HMI (SL) (CODESYS) Fixed in 3.5.20.10

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    CODESYS Control Win (SL), CODESYS HMI (SL) 3.5.20.10

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2024-04643 CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA productsPriority MEDIUM 40
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-5751
  2. 2026-10-03 Alias added: GHSA-3r4g-2cq7-57r5

References

Other 2

  • TI-2021-12888 CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. CVSS 3.1CRITICAL 9.8
  • TI-2019-10180 Stack-based buffer overflow in CODESYS V3 web server CVSS 3.1CRITICAL 9.8
  • TI-2021-13604 CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS) CVSS 3.1HIGH 7.5
  • TI-2020-08257 CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow. CVSS 3.1CRITICAL 9.8
  • TI-2019-13592 CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow. CVSS 3.1CRITICAL 9.8
  • TI-2017-03937 Unrestricted file upload in 3S-Smart Software Solutions GmbH CODESYS Web Server CVSS 3.0CRITICAL 9.8
See all 155 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences