CVE-2023-5751

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-668

Affected software

VendorProductVersions
CODESYSCODESYS Control Win (SL)< 3.5.20.10
CODESYSCODESYS Development System V3< 3.5.20.10
CODESYSCODESYS Edge Gateway for Windows< 3.5.20.10
CODESYSCODESYS Gateway for Windows< 3.5.20.10
CODESYSCODESYS HMI (SL)< 3.5.20.10
codesyscontrol_win_sl< 3.5.20.10
codesysdevelopment_system_v3< 3.5.20.10
codesysedge_gateway< 3.5.20.10
codesysgateway< 3.5.20.10
codesyshmi_sl< 3.5.20.10

References

Timeline

Published
Jun 4, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-57523.3When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision couCVE-2023-57538.8Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.cCVE-2023-57549.8Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain fullCVE-2023-57568.8The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7CVE-2023-57574.8The WP Crowdfunding WordPress plugin before 2.1.8 does not sanitise and escape some of its settings, which could allow high privilege users CVE-2023-57586.1When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site ScripCVE-2023-57597.5In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the buffer was identified. Reported by Jason CVE-2023-57607.0A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads to an out-of-bounds CVE-2023-57617.5The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter CVE-2023-57628.8The Filr WordPress plugin before 1.2.3.6 is vulnerable from an RCE (Remote Code Execution) vulnerability, which allows the operating system CVE-2023-57639.8In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load maCVE-2023-57647.8A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation fr