CVE-2023-3670

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-668

Affected software

No affected versions have been published.

Timeline

Published
Jul 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-367017.8Microsoft Resilient File System (ReFS) Elevation of Privilege VulnerabilityCVE-2023-367027.8Microsoft DirectMusic Remote Code Execution VulnerabilityCVE-2023-367037.5DHCP Server Service Denial of Service VulnerabilityCVE-2023-367047.8Windows Setup Files Cleanup Remote Code Execution VulnerabilityCVE-2023-367057.8Windows Installer Elevation of Privilege VulnerabilityCVE-2023-367066.5Windows Deployment Services Information Disclosure VulnerabilityCVE-2023-367077.5Windows Deployment Services Denial of Service VulnerabilityCVE-2023-367097.5Microsoft AllJoyn API Denial of Service VulnerabilityCVE-2023-36716.1The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters before outputting iCVE-2023-367107.8Windows Media Foundation Core Remote Code Execution VulnerabilityCVE-2023-367117.8Windows Runtime C++ Template Library Elevation of Privilege VulnerabilityCVE-2023-367127.8Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-3670: High severity, CVSS 7.3 | Vulnix