Read the docs
TI-2023-05836 Aliases CVE-2023-6357GHSA-2fx7-mf6r-pff9

OS Command Injection in multiple CODESYS products

Priority MEDIUM 40CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

Why it matters now

EPSS 0.00958 61st percentileScored 2026-11-07
Fix Fixed CODESYS Control for BeagleBone SL (CODESYS): 4.11.0.0CODESYS Control for emPC-A/iMX6 SL (CODESYS): 4.11.0.0+9 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
CODESYSCODESYS Control for BeagleBone SLbefore 4.11.0.04.11.0.0Patch availableCNA
CODESYSCODESYS Control for emPC-A/iMX6 SLbefore 4.11.0.04.11.0.0Patch availableCNA
CODESYSCODESYS Control for IOT2000 SLbefore 4.11.0.04.11.0.0Patch availableCNA
CODESYSCODESYS Control for Linux ARM SLbefore 4.11.0.04.11.0.0Patch availableCNA
CODESYSCODESYS Control for Linux SLbefore 4.11.0.04.11.0.0Patch availableCNA
CODESYSCODESYS Control for PFC100 SLbefore 4.11.0.04.11.0.0Patch availableCNA
CODESYSCODESYS Control for PFC200 SLbefore 4.11.0.04.11.0.0Patch availableCNA
CODESYSCODESYS Control for PLCnext SLbefore 4.11.0.04.11.0.0Patch availableCNA
CODESYSCODESYS Control for Raspberry Pi SLbefore 4.11.0.04.11.0.0Patch availableCNA
CODESYSCODESYS Control for WAGO Touch Panels 600 SLbefore 4.11.0.04.11.0.0Patch availableCNA
CODESYSCODESYS Runtime Toolkit for Linux or QNXbefore 3.5.19.503.5.19.50Patch availableCNA
  • CODESYS Control for BeagleBone SL VendorCODESYS Affected before 4.11.0.0 Fixed in 4.11.0.0 Patch available CNA
  • CODESYS Control for emPC-A/iMX6 SL VendorCODESYS Affected before 4.11.0.0 Fixed in 4.11.0.0 Patch available CNA
  • CODESYS Control for IOT2000 SL VendorCODESYS Affected before 4.11.0.0 Fixed in 4.11.0.0 Patch available CNA
  • CODESYS Control for Linux ARM SL VendorCODESYS Affected before 4.11.0.0 Fixed in 4.11.0.0 Patch available CNA
  • CODESYS Control for Linux SL VendorCODESYS Affected before 4.11.0.0 Fixed in 4.11.0.0 Patch available CNA
  • CODESYS Control for PFC100 SL VendorCODESYS Affected before 4.11.0.0 Fixed in 4.11.0.0 Patch available CNA
  • CODESYS Control for PFC200 SL VendorCODESYS Affected before 4.11.0.0 Fixed in 4.11.0.0 Patch available CNA
  • CODESYS Control for PLCnext SL VendorCODESYS Affected before 4.11.0.0 Fixed in 4.11.0.0 Patch available CNA
  • CODESYS Control for Raspberry Pi SL VendorCODESYS Affected before 4.11.0.0 Fixed in 4.11.0.0 Patch available CNA
  • CODESYS Control for WAGO Touch Panels 600 SL VendorCODESYS Affected before 4.11.0.0 Fixed in 4.11.0.0 Patch available CNA
  • CODESYS Runtime Toolkit for Linux or QNX VendorCODESYS Affected before 3.5.19.50 Fixed in 3.5.19.50 Patch available CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*before 4.11.0.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_empc-a\/imx6:*:*:*:*:*:*:*:*before 4.11.0.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*before 4.11.0.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*before 4.11.0.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*before 4.11.0.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*before 4.11.0.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*before 4.11.0.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*before 4.11.0.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*before 4.11.0.0VulnerableCODESYS
cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*before 4.11.0.0VulnerableCODESYS
  • cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* Versions before 4.11.0.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_empc-a\/imx6:*:*:*:*:*:*:*:* Versions before 4.11.0.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* Versions before 4.11.0.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:* Versions before 4.11.0.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* Versions before 4.11.0.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* Versions before 4.11.0.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* Versions before 4.11.0.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* Versions before 4.11.0.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* Versions before 4.11.0.0 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* Versions before 4.11.0.0 Vulnerable ·CODESYS
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*before 3.5.19.50VulnerableCODESYS
  • cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:* Versions before 3.5.19.50 Vulnerable ·CODESYS

Remediation

  • Fix · CNA CODESYS Control for BeagleBone SL (CODESYS) Fixed in 4.11.0.0
  • Fix · CNA CODESYS Control for emPC-A/iMX6 SL (CODESYS) Fixed in 4.11.0.0
  • Fix · CNA CODESYS Control for IOT2000 SL (CODESYS) Fixed in 4.11.0.0
  • Fix · CNA CODESYS Control for Linux ARM SL (CODESYS) Fixed in 4.11.0.0
  • Fix · CNA CODESYS Control for Linux SL (CODESYS) Fixed in 4.11.0.0
  • Fix · CNA CODESYS Control for PFC100 SL (CODESYS) Fixed in 4.11.0.0
  • Fix · CNA CODESYS Control for PFC200 SL (CODESYS) Fixed in 4.11.0.0
  • Fix · CNA CODESYS Control for PLCnext SL (CODESYS) Fixed in 4.11.0.0
  • Fix · CNA CODESYS Control for Raspberry Pi SL (CODESYS) Fixed in 4.11.0.0
  • Fix · CNA CODESYS Control for WAGO Touch Panels 600 SL (CODESYS) Fixed in 4.11.0.0
  • Fix · CNA CODESYS Runtime Toolkit for Linux or QNX (CODESYS) Fixed in 3.5.19.50

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-6357
  2. 2026-10-03 Alias added: GHSA-2fx7-mf6r-pff9

References

Advisory 1

Other 1

  • TI-2019-06497 An issue was discovered in 3S-Smart CODESYS V3 products. CVSS 3.1CRITICAL 9.8
  • TI-2018-07501 Improper access control in 3S-Smart Software Solutions GmbH CODESYS Control V3 products… CVSS 3.0CRITICAL 9.8
  • TI-2022-23467 CODESYS: Multiple products prone to out-of-bounds write CVSS 3.1HIGH 8.8
  • TI-2022-23479 CODESYS: Multiple products prone to Improper Input Validation CVSS 3.1HIGH 7.5
  • TI-2022-23478 CODESYS: Multiple products prone to stack based out-of-bounds write CVSS 3.1HIGH 8.8
  • TI-2022-23477 CODESYS: Multiple products prone to stack based out-of-bounds write CVSS 3.1HIGH 8.8
See all 49 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences