VDB
BDU%3A2023-03572
BDU%3A2023-03572
PUBLISHED
CVSS 10 CRITICAL
Уязвимость плагина Engine.plugin комплекса прикладного программирования ПЛК CODESYS Development System, позволяющая нарушителю выполнить произвольную команду
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric, CODESYS GmbH | EcoStruxure Machine Expert, CODESYS Development System V3, CODESYS SVN, Eurotherm E+PLC |
Timeline
- Jul 6, 2023 CVE Published
- Dec 16, 2025 CVE Updated
References
- https://www.se.com/ae/en/download/document/SEVD-2022-011-06/ url
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16805&token=ee583c498941d9fda86490bca98ff21928eec08a&download= url
- https://www.cve.org/CVERecord?id=CVE-2021-21869 url
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1306 url