high8.8
CVE-2023-6357
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker …
Impact
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Control For Beaglebone Sl | before 4.11.0.0 |
| Codesys | Control For Empc-A\/Imx6 | before 4.11.0.0 |
| Codesys | Control For Iot2000 Sl | before 4.11.0.0 |
| Codesys | Control For Linux Arm Sl | before 4.11.0.0 |
| Codesys | Control For Linux Sl | before 4.11.0.0 |
| Codesys | Control For Pfc100 Sl | before 4.11.0.0 |
| Codesys | Control For Pfc200 Sl | before 4.11.0.0 |
| Codesys | Control For Plcnext Sl | before 4.11.0.0 |
| Codesys | Control For Raspberry Pi Sl | before 4.11.0.0 |
| Codesys | Control For Wago Touch Panels 600 Sl | before 4.11.0.0 |
| Codesys | Runtime Toolkit | before 3.5.19.50 |