Codesys Development System V2.3 (Codesys) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-05-06. Vendor: Codesys.

CVEs of Codesys Development System V2.3

• CVE-2023-49676 - CVSS 5.5 (medium), 2024-05-06: An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability.
• CVE-2023-49675 - CVSS 7.8 (high), 2024-05-06: An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write…