CVE-2023-6357

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

VendorProductVersions
CODESYSCODESYS Control for BeagleBone SL< 4.11.0.0
CODESYSCODESYS Control for emPC-A/iMX6 SL< 4.11.0.0
CODESYSCODESYS Control for IOT2000 SL< 4.11.0.0
CODESYSCODESYS Control for Linux ARM SL< 4.11.0.0
CODESYSCODESYS Control for Linux SL< 4.11.0.0
CODESYSCODESYS Control for PFC100 SL< 4.11.0.0
CODESYSCODESYS Control for PFC200 SL< 4.11.0.0
CODESYSCODESYS Control for PLCnext SL< 4.11.0.0
CODESYSCODESYS Control for Raspberry Pi SL< 4.11.0.0
CODESYSCODESYS Control for WAGO Touch Panels 600 SL< 4.11.0.0
CODESYSCODESYS Runtime Toolkit for Linux or QNX< 3.5.19.50

References

Timeline

Published
Dec 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-63596.1A Cross-Site Scripting (XSS) vulnerability has been found in Alumne LMS affecting version 4.0.0.1.08. An attacker could exploit the 'localidCVE-2023-63609.8The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the 'from' and 'to' paCVE-2023-63617.3A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlCVE-2023-63627.3A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlCVE-2023-63635.1Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-priCVE-2023-63645.4In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified.  It is possible for CVE-2023-63655.4In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. It is possible for CVE-2023-63665.4In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. It is possible for CVE-2023-63675.4In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. It is possible for CVE-2023-63685.3In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an CVE-2023-63695.4The Export WP Page to Static HTML/CSS plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a miCVE-2023-63715.4An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versio
CVE-2023-6357: High severity, CVSS 8.8 | Vulnix